skysight-inc/HackerNews huggingface dataset:
You can do both!
Your general file can loosely define dependencies like greater than this version, less than this version, skip this version, etc

Then you “lock” and it builds a dependency tree with the newest version of everything that satisfies your loose requirements.

Then you can choose to install dependencies
from your lockfile, which is exact frozen versions OR you can re-run the lock later, which will again attempt to update everything to the latest versions that satisfy your loose constraints
And they're also disgusting, poorly maintained, and full of drug addicts.
You can just 'pip freeze > requirements.txt'

Boom, all recursive dependencies frozen to their current state.
Flutter – Beautiful native apps in record time
But then you're suddenly responsible for keeping track of your subdependencies and updating the versions of each that you want. That should be up to the dependencies.

Also if you manage to drop a dependency, you don't have an easy way to remove the things from requirements.txt that are only there because they're a subdependency.

Putting it all in one requirements.txt is just too simplistic.
thanks for writing this! it is very clear. i'd love to see what, if any, problems this explanation has.
They already were keeping up with hosting costs at least with the old Reddit gold donations.

Also profits pay for non of the things you listed, profits pay for investors.
70% of people globally work remotely at least once a week
> People will do 500$ worth of damage to make 30$

A good example is copper wire thieves. They pull up to a house and access the electrical panel in the garage which they turn off. Using a winch, they pull out all the copper wire in the house that's directly connected to the box (there's also many branch lines left behind). They then sell the wire as scrap for $20 or so and presumably use the money to buy drugs.

Fixing this damage can run $30,000 to $100,000. The whole house can have to be torn apart from the inside to reinstall all the electrical.
> The specifics of Google’s business operations traditionally haven’t required this level of secrecy, but that is changing. Google’s cloud business in particular requires it to convince business clients it can handle sensitive data and work on discrete projects. This has brought it more in line with its secrecy-minded competitors.

The article fails to mention a certain Anthony Levandowski [0] and biases towards anti-innovation and anti-activism narratives, in particular. Sensitive documents can't be just kept lying around esp when industrial espionage [1] and intellectual property theft is a thing [2].

> Apple Inc. and Amazon.com Inc. demand that workers operate in rigid silos to keep the details of sensitive projects from leaking to competitors. Engineers building a phone’s camera may have no idea what the people building its operating system are doing, and vice versa.

I remember back in 2010-14 when the entire Fire Phone / Tablets / TV / Echo orgs were kept under wraps. It was such a drastic change from the otherwise quite transparent culture at Amazon that it almost felt un-Amazon-esque. To me, those teams, back in the day, felt as if had a culture of their own separate from the rest of the company. The silos were rigid, and that was by design. These days you'd find, by default, certain teams keep their docs under wraps forever (even post-launch). Some teams continue to commit to transparent documentation.

I missed the open culture which was curtailed (a necessity, though took a bit too far by some orgs) but I see why Amazon needed to do that. You could not possibly trust all 600K employees going through the system with high churn. The learnings / information weren't pull anymore, you had to get it pushed to you, on a case by case basis, and the principal engineers became the common thread through which Amazon's culture and engineering fabric was woven. Not sure if that was a bad thing or a good thing, but seemed necessary for the scale at which the company was operating.

Things did not get better and there were down-sides: Even a mention of things on internal pages you didn't even know were supposed to be secret, got you nice escalation emails from all corners, which meant your year-end reviews had a special mention of how you needed to improve earn trust and tone down learn and be curious [3], just because...

[0] https://news.ycombinator.com/item?id=13718586

[1] https://news.ycombinator.com/item?id=20283828

[2] https://news.ycombinator.com/item?id=9011628

[3] https://news.ycombinator.com/item?id=15910526
> because that content can be a bit salty.

AKA the fate of every site that is a collection of usergenerated content with an ad based business model. If you want to get serious about monetization then you need to actively curtail any content that is not "advertiser friendly" which in most cases means alienating your core content generators, case in point, Tumblr.
So Google is a totalitarian institution because they give out a lot of perks? Freedom is Slavery.
I've always likened it to the early days of computing when it was "Big Blue" vs everybody. Small upstarts like Apple were very much the Hippy compared to the Button-Down Square.

That Hippy rebel spirit is/was very much an identifying characteristic of `Silicon Valley`. I'd even say that Google is the poster child of Silicon Valley v2.0, and the people that work there might even resent the inevitable conservative slide that makes Google in 2019 look more like IBM in 1989. I know I resent that.
But you don't want to necessarily freeze them to their current state. Yes for repeatable builds, but not in your list of dependencies. They're different concerns and Pipenv splits them.
>“This project needs package X”

>I mean how hard can that be to get right in a self-contained environment?

Okay, I’ll bite.

What version of package X does it need?

Is there a specific version that’s been tested with this project and is known working?

Are there specific versions of its dependencies that have been tested and are known working?

Is it needed at runtime or only at build-time?

What repository can it be found in? PyPI is not the only Python repository; private repos are common.

And as a bonus cherry on top: how easy is it to make sure you have all the project’s dependencies installed in the venv for that project, and that you don’t have packages you’re not keeping track of? This is a UX thing, but developers are human and it matters.
I dream of a world where I can present my complaints in plain English and have it considered by a court, without having to pay a fortune to lawyers.

It's somehow an accepted state of affairs that even if you're in the right, you need some cunning lawyers who will twist words in the right way and build a strong narrative of why you are right, otherwise tough luck.

Justice should not be up for purchase.
The starting number has to be a prime, and the result is that you would cycle to that number and no further.

Alternative result would mean literal mathematical chaos. The number would be an origin point of an attractor. Approaches to find such a counterexample would require something akin to guessing a fractal.

Trying to evaluate the Lyapunov exponent of this system could be fun. Applying Poincare-Bendixson and Bendixson-Dulac to a dual system that is so defined as to reject the final limit cycle and is differentiable, perhaps... Too big math for me. It smells of Hilbert's sixteenth problem.
As a mostly-solo entrepreneur / consultant, I've had some success in shifting professional engagements toward the "strategic consulting" end of the spectrum. I credit author R. Rumelt ("Good Strategy, Bad Strategy"), and FB VP Product J. Zhao ("How to be Strategic") for excellent perspective and actionable advice, which distills down to:

A strategy is a set of actions designed to achieve a particular objective.

The actions need to be credible, coherent, and focused.

Designing them properly takes hard work.

The most practical path to actually being strategic:

1. "Wild Success":
Create alignment around what it looks like

2. "Problems / Whose":
Deeply grok problem space and its ecosys, and be crystal clear abt what problems looking to solve, and for whom.

3. Prioritize:
Focus means saying "no". Cut, ruthlessly, anything inessential.

Working on applying these ideas outside work context, too.
Right - maintaining backwards compatibility is deciding to take on additional technical debt.

I think the implicit calculation here is that if you push a release that breaks the user's workflow, they can point to a specific point in time where things became frustrating and there will be a PR hit at that moment in time.

If instead you maintain compatibility, the small costs of all the technical debt accrue over time to make the experience worse than it might otherwise be, but users may not even notice or have a conception of what they may be missing for having stayed on this path.

They ultimately may end up with a worse product / UX, but they have no specific reason to complain about it.
This so much. Broken people shouldn't do psychedelics, or they might end up more broken. You really can't hide your flaws and issues from it. How to define who is broken and who is not is not for this post, or this site, more for good experienced psychologists. I've been disassembled down into atoms of my personality, 'saw' them dance and swirl on gentle shamanic music I played in the background and when coming down from the trip, assembled back again, piece by piece, sense by sense. Only then I realized that my mental state was perfectly OK and no hidden cracks looming beneath the surface. I would never recommend such a leap of faith to random people I don't know deeply.

Doing this with anybody else wouldn't achieve any of this insight, I presume a lot fo energy would be spent managing communication with other person or attempt to stay more grounded rather than let it go.

For rest of us, it is often a life changing experience and defining moment of our lives. It was for me (mushrooms grown from spores from Netherland, never did acid but should be +-similar). One trick with shrooms - raw lemon juice makes it way more intense and shorter experience, which is combination I prefer for introspection.
In 1992, when Switzerland voted "NO" to the EEE (European Economic Area), we had all these drama for a few years in the newspapers. The Swiss media kept telling us we would die alone on our island in the middle of Europe...
Show HN: A free tool to find correlated assets for tax harvesting
I'm surprised to see Nvidia hosting[1] the pre-trained networks on google drive which has already been blocked for going over the quota:

> Google Drive download quota exceeded -- please try again later

1. https://github.com/NVlabs/stylegan2#using-pre-trained-networ...
We're not anywhere near what the GM is talking about. He's not talking about how Uber and Lyft are today. I also didn't mention congestion in my comment.
People who disagree are not going to be convinced by corporate comms. It’s not going to happen. It’s a bigger distraction than what you’d otherwise get.
I don't think it is.

Still an incredibly useful website with a gorgeous design!
Are Critic Choice Awards comparable to Emmy awards? I always felt these were B or C tier awards. However I am not in this industry and could be completely out of touch.

To me actions like what Netflix did are nothing more than another form of marketing. You either buy what they are selling or you don't.
Thanks for the link, interesting read.

I still think this is all too convoluted though. I hope an accepted de facto standard for this will emerge at some point.
If users are happy to publish the data

Surely 99% of people don't realise that 3rd parties can scrape which groups they're in/pages they're fans of? The scraper doesn't even need to add them as a friend for this, provided the group/page isn't private.
> > pipenv allows you to create, manage virtual environments(using venv) apart from managing requirements file(Pipfile) and an npm like locking mechanism, dependency graphs, dev dependencies and more.

> Why on earth would anyone need all this to manage packages for their projects?

> Are there any other programming languages whose package-management comes close to this level of intricacy and complexity?

> “This project needs package X”

> I mean how hard can that be to get right in a self-contained environment?

Packages often have subdependencies and their requirements at times may conflict. If you are very specific in the versions you want, it is more likely to cause issues in dependency resolution.

I would hardly call a dev's machine a "self-contained environment". Most developers I know work in a number of repos with varying requirements, and polluting their system libraries and packages with each project's requirements quickly pollutes the system and can lead to issues.
Personnel files, yes, but one could definitely share hiring practice statements, salary schedules, rules for how requisitions are approved/allocated, how much freedom hiring manages have to negotiate salaries, etc. Whether that is a good idea is another question, but it could be done if the goal was as much openness as possible.
Do you think Poetry solves this package management mess?
My limited experience is that Conda is great if you are all-in on the parallel ecosystem, but it doesn't play well with others. Or at least, it didn't for me.
You cannot find ONE such number. Either there is a loop that doesn't include 1, so you found a sequence of them. The other possibility if the sequence goes to infinity and so you found and infinite number of counter examples.
There are some things on Reddit that I thankfully rarely experience, but that drive me absolutely mad when I do : automatic thread locking after some time and shadow bans.

Both of these violate netiquette!

As a reminder, proper netiquette is to necropost instead of creating a duplicate thread.

And shadow banning is not a tool that most moderators should even have, and should only be used against the most horrible trolls!
Mackenzie Child also did http://www.lolcolors.com/ a while back.
Abuse and illegal content is a huge worry of mine. Maintaining a moderation working group is a concern at scale for sure. My aim is to adopt a volunteer moderation program similar to reddit.
Yes. Probably by design.
Show HN: Convert NMAP, Nessus, etc. Results to XLSX, CSV, or ASCII Tables
That makes updating your direct dependencies harder. If you upgrade to using newer version of something, and that things dependencies have changed, you have to manually figure out which dependencies in requirements.txt were for it, and update or remove those etc.
healthcare is a bad fit for the concept of insurance. an obvious example is that people use their "insurance" to pay for routine doctors appointments which have highly predictable costs and are scheduled in advance. the chronically ill person in your example enrolls in insurance knowing upfront they will never pay enough in premiums to cover their claims.

what we call "health insurance" is really just a payment planning and collective bargaining service rolled into one. it doesn't really work like most other kinds of insurance.
Does level of intelligence determine how much respect you give something then?
Regarding the data policy, is the reason that the risk of someone leaking information is now being perceived as higher than in the past?

If so, why? Have there been leaks? Is there a plan to hire a bunch of new less vetted employees?

Or maybe it's a manipulative attempt to make those with undesirable cultural traits (including a desire for internal openness) leave the company without saying so explicitly?
Pre-positioning staples like toilet paper isn't new, no.

Pre-positioning a few black truffles because one person thought about buying them yesterday is, though.
Would you say the same if the Boeing employees that don't like the new unsafe culture should shut up and leave?

I think is better when the employees have some power to keep the company true to the ideals and not close their eyes. I understand that is bad PR to criticize unsafe or imoral shit but if this would have happened at Uber or Boeing then a lot of people might have been alive now.
Detectors, jammers and cyber-attackers: the rise of anti-drone tech
There is epigraphic evidence (the inscriptions of the Emperor Ashoka) for Buddhism in BCE times.
OP might like r/ChoosingBeggars...
Mozilla to force all add-on devs to use 2FA to prevent supply-chain attacks
A crippling financial crisis, an unpopular war and a crook for president...
I attach a debugger to the server
Precisely. +1 to TheOtherHobbes

There is so much to human cognition that researchers haven’t or have been unable to address in AI.

We can tell from our memories that when we experience something, it is not simply raw perception. In fact our System 1 minds are filtering out most of our sensory input so that even if two people are watching the same sunset, they’ll notice it differently.

And on top of that, our memories are infused with so many other details that are not sensory input but artefacts from our lived experiences, personalities and cultural heritage. So that now even if two people are noticing similar things, they’ll still experience the sunset differently.

And next time you are looking at a sunset, try to gather of all your thoughts and explain precisely how you are experiencing it. That is hard.

So yes even a simple begged question like that shows the differences between human and computer cognition enough.
Manage Contacts the Unix Way
you rock thanks for sharing
Why Nukemap Isn't on Google Maps Anymore
Similar here. Both back side windows. Fortunately they were on hinges and could be cracked open so I was able to get used ones at a junkyard for $60 each and replace them myself. Then the rear window got smashed in. $200 at the junkyard for that one and a lot harder to DIY. Then the trunk got jimmied, breaking the lock. I can't remember what that costed to fix, I had to have it keyed by the dealer, I think it was fairly expensive. Stolen radio (value approximately $300) I didn't replace. Stolen technical manuals and books (maybe $300 as well) I replaced some. I doubt they were able to even sell those.

It's one of many reasons I moved away from there and do not entertain any job offers from that region, regardless of how much they are offering. At a certain point one needs to write off these cities. That or accept being a victim with no legal recourse knowing your car's going to be vandalized damaged and stolen on a regular basis and you are going to be hassled by guys with guns when walking down the street.
Hi HN!

I'm happy to share this free tool that we launched today.

Back in 2015 we started building tools to manage our own money (this is how AgentRisk started) and we share tools that might help you, too!

If you're a DYI investor (or stock data nerd), I'm sure you'll find this tool useful.

Enjoy!
The openings look "U" shaped, and filled with the window frame and topped with vent tiles. It doesn't look like any support is needed as those are probably added after the print dries.
They are also owned by Mr Bezos, who also owns something called Amazon Prime Video. Looks like Netflix needs to buy it's own newspaper.
constantly having the prescriptivism vs descriptivism debate is tiresome and pedantic. what we call "health insurance" clearly works very differently than any other kind of insurance I'm familiar with. it's not wrong to try and maintain the distinction between two different concepts.
> It’s easy to also get the versions of all sub dependencies and put them in requirements.txt

Is it easy to automatically do this when you want a new package version, without having to remember to do it? Is it easier to put together this process and train other developers in it and be diligent in its use? Is all of that easier than installing an application that has a similar interface to other tools, that does all that for you, and has a community of people to help with issues?
> I guess we could do nothing and hope that at some point governments figure out to build public transportation in a reasonable time frame for a reasonable amount of money...

Non-US governments already have. This isn't incompetence, it's intentional policy.

> This is because of all the other cars clogging up the road.

Ride sharing has only made this problem worse[1]. Is there any evidence that even more ride sharing will improve the situation? The basic problem is that everyone needs to get into or out of a few central locations at around the same time (typically 9am/5pm). Solving this requires moving people more efficiently (as in more people/m^2 of roadway) than cars, even ride sharing cars, would allow.

[1] https://www.smartcitiesdive.com/news/report-ride-sharing-inc...
pip freeze gets everything installed.

Yes, that 'freezes' everything installed... but that's the point. If you want to update a direct dependency, you just do pip install -u <my-dep>. Any indirect dependencies are updated, and you freeze again.

Sometimes direct-dependency-a and direct-dependency-b have a conflict on which version of indirect-dependency-y you need. This is what we call doing 'actual work.'
The same thing could be said of the X server.
Great article.

I'm always a bit ambivalent about assigning "hard and fast rules."

In my mind, a "framework" is...a framework.

Frameworks are structural artifacts. They exist in the corporeal world, as well as CyberWorld. Buildings are constructed over frameworks. Vehicles are constructed over frameworks.

I have been writing SDKs, APIs, frameworks and drivers for a long time.

<opinion type="mine">

I tend to differentiate them (in my head) like so:

DRIVER

Code/binary asset that affords a connection between two levels of a dynamic system; abstracting characteristics of the lower part of the system.

Drivers can exist at many layers; from machine-code to UI. I have written UI component drivers, as well as device drivers.

Drivers tend to be "smaller" projects than frameworks, but there's a lot of similarity between drivers and some types of frameworks.

API

The published specification that defines interaction with a code/binary asset; combined with a minimal level of exposed code to afford access to the API elements.

SDK

A code/binary asset that exists independent of an API, but which affords access to that API; often adding functionality.

I feel that an SDK can def be a framework.

FRAMEWORK

Fairly similar to what was defined. maybe a bit "looser."

This is a set of code assets (not necessarily binary, but it's possible) that can be used as a "seed" or integral component of a code application (small "a," not necessarily a complete executable application -it could be a driver, SDK, operating system or framework).

In my mind, frameworks can be complete, self-contained and closed; possibly exposing only an API as an affordance to access the assets.
Cocoa is an example.
A framework can also be completely open-ended, and unusable without components provided by the implementor.
Classic app frameworks like Qt are examples of this.

It may be open-source, or opaque.

The frameworks that I have written have been fairly large.

I feel that Drupal or WordPress can be considered frameworks, as well as things like Qt or Cocoa.

</opinion>
I don't think that sounds too bad. There's very few things in modern life that bothers me more than insurance. Somehow humans used to get by, helping each other out when times were tough. I guess we're too bought in now to go back, but a healthy, single person can dream of not subsidizing teenagers livestreaming behind the wheel & overpriced medicine and unnecessary medical tests.