skysight-inc/HackerNews huggingface dataset:
They are doing different things, and that is exactly the point! Here is a random example:

"meteor.js" was a first relevant hit for curl|sh query on google. is javascript app platform. You are supposed to use "curl | sh" to install it ( https://install.meteor.com/ ). This file:

- Hardcodes install location to ~/.meteor (and removes previous location of it).

- Uses "sudo" to write to /usr/local/bin/meteor

Compare it with "scipy", which can be called a scientific app platform. It tells you to install via pip to user dir ( https://www.scipy.org/install.html ). It installs itself only to this dir, and nowhere else (I know it because I use it at work a lot, and we do pre-packaged virtualenv here). It is also using standard mechanisms -- if you want to have many version side-by-side, it is trivial.

Can you write |sh script so it minds its own business and only writes to a single directory? Yes. Do people do this? Not very often.

-----

When I wrote this, I thought: maybe I am biased towards curl|sh method because I don't know of one? So I want to HN front page, looked at last 210 entries, chosen every one which looks like a a software installable on a PC, and tried to evalalate the system impact:

- Dephell: curl | python, no side effects other than forced install location.

- neo.mjs: installed via node, presumably no side effects outside of node/project dir

- huginn: manual steps, all manual -- or docker. No surprises either way.

- ponylang: docker or PPA. No surprises.

- Poetry: installed via "curl|python", modifies my .bashrc to set PATH (to be fair, it told me about this afterwards...)

- Uni the unicode database: use "go get", no side effects

- Qt 5.1 -- commercial, "installer app".

- Virtualbox 6.1 -- installed via .deb file (system-wide but expected)

- event-driven-shell -- run from repo, optional "make install"

We've had 2 "curl |" apps. One of them was modifying my ~/.bashrc.

We've had 4 "traditional" apps -- which used "checkout repo and run command" method. None of them were writing stuff outside of their checkout dir. Some of them explicitly recommended that users change their .bashrc.

We've also had some docker apps and .deb-installed apps. Of them, virtualbox and Qt could write all over the places -- but they are much more "heavy weight" compared to other ones..

----

This is not a very big sample, but I think it is pretty representative. Once piping things into shell, it seems people cannot help but install stuff all over the place. It is just like "make install" was -- except it is not optional this time.
It's like 6 years to get a degree that AI should replace though.
As long as the big ML libraries support these strategies, people will use them. The choice of user language is not critical. Tensorflow/PyTorch are basically an ML-specific programming model with a Python interface.
I really enjoyed Jules May's If considered harmful: How to eradicate 95% of all your bugs in one simple step - although I thought it might be a joke, it's not, and I got a lot from it, the first half particularly, delving into Dijkstra, SP and why goto was considered harmful, space vs time, assert() etc. And yes, how he eradicated 95% of his company's bugs.

https://www.youtube.com/watch?v=z43bmaMwagI
The thing you get in the sea is unlimited free cooling and radiation shielding. You could dump the core onto the seafloor and not really have to worry about anything except the fuel elements eventually corroding and polluting a small area.

There are 11 known reactors dumped into various oceans and nothing terrible has come about from them.
While rooftop solar does allow you to go completely off-grid, if you still want to have a grid around, it will have to be centralized. An underappreciated aspect of power grids is just how much advanced control is required to keep the entire thing stable and functioning, think armies-of-PhD's-difficult.
When grids get too small, or don't have sufficient control (either knobs, or software/people turning the knobs), the results are frequent blackouts.
Interestingly, the risk begins increasing again as your grid gets too large: you have too many knobs to reasonably control centrally, and it certainly won't work without synchronized control. As a case study, see how China is breaking up some of their huge electricity grids (in to still-large ~1000mile or so regions), as maintaining reliability and preventing faults from propagating across the country became too difficult.
Watch Live Television on Mobile
That has also been my experience (for motorcycling and bicycling). Gloves are the one item I have to buy in person.

REI stores are a great place for buying winter gloves and also bicycling gloves. Other than that: Costco, bicycle dealers, motorcycle dealers.
This just boils down to social skills really. Some people are just killjoy grievance machines though so it's worth noting.
Programming considered harmful! How to eliminate 100% of your bugs!
Murfie might “throw them away” by failing to properly handle and do anything based on ownership records, possibly leaving the media as abandoned property in facilities it got locked out of for failing to pay rent as it failed, not (most likely) by actively placing them in garbage bins.

The net effect from the perspective of the owners is, of course, exactly the same as if Murfie was malicious and actively discarding them.
Whose side are you on?
> revoke the refresh token, you have to maintain a blacklist somewhere

Store CreationDate in the refresh token. Store RefreshTokenInvalidBefore in the user record. When refresh is attempted, if Token.CreationDate <= User.RefreshTokenInvalidBefore, reject the refresh. The only drawback here is that it would sign the user out on all devices. However, assuming this is because of a password or token compromise, that's likely the least of their worries.
Perhaps Google is less transparent than it once was, but once again it seems like people are lamenting the passing of a Google culture that never really existed. Parts of Google's monorepo were restricted to specific owning teams over a decade ago, and sending email to an executive would get you a talking-to from your manager if they didn't like the tone of it.
At Costco, the generous return policy also inspires confidence. If Costco stocks an item that's not very good, they will get many returns which cost them money, so they have an incentive to research any item they sell to filter out bad quality.
A Natural History of Beer
Are you implying that Genius wrote all those songs?
Show HN: Control You Windows PC with your Google Home / Assistant
Curious what's stopping you from symlinking python3 to python? In fact, I'm surprised the package manager didn't already do that (I thought it did for Debian and its derivatives, including Ubuntu). Does WSL throw a wrench in that or something?
Python Tips and Trick, You Haven't Already Seen
The perfect knowledge she claims to be burdened by is anything but. The actual problem here is imperfection of knowledge. What do you know, when someone tells you a glove is soft? What do you know, when they tell you it's waterproof? What do you know when they tell you it's leather? You know nothing for sure if all you've got to rely on is second-hand hearsay information. You're stuck in Plato's cave, chained to the wall.

Shopping online should be reserved for cases when either you already know most of what you need to know, through first-hand experience, or when you're willing to do the buy-and-return thing a couple times to find out.
Where can I find metrics on Agile Projects
I'm trying to get some metrics on agile adoption, success and failure of projects using agile frameworks. Is there a site that does these analysis and has data?
Yes I agree, and thought I said nothing to imply that being on the grid is not useful, but maybe I could have made this more clear.
Secular amen. (Not sure what opcode that is. I'll have to look at the datasheet.)

RIP bro. :'(
I also looked into this but was disappointed when I found that android support for USB HID only goes in one direction. You can attach a keyboard to your phone, but your phone cannot act like one. There are so many useful usecases for a phone like a keyboard it is too bad...
There are many things at Costco where you save quite a bit compared to buying elsewhere: Cheese, smoked salmon, maple syrup, vitamins, cereal bars, peanuts, Kerry Gold butter, Chobani plain yogurt ($3 vs $6), socks.
Sort of agree. But unfortunately as a taxpayer or ratepayer you still end up sharing the cost of centralized boondoggles when they happen. Less so with decentralized elements of the system.
Does it matter if your local town isn't known for startups?
| but it starting to get a standard inside browsers as well

Browsers don't care about the file extension, just the mime-type. Node supports modules with any extension now as well. I wouldn't use .mjs, it causes lots of problems.
Guilt by association, I suppose.
My most memorable policy as an end user was as a consulting client for a huge bank. On top of the usual length, character type, and password changing requirements, the password could not use substrings of 3+ characters from any of your prior passwords.

They were also required to pass a black-box “complexity” algorithm, and the vast majority of passwords generated by my password manager inexplicably failed this bar.

So every 6 weeks I would set aside about 20 minutes to generate new passwords of varying length in my password manager until one would be accepted as the new password.
Used to be brick an mortar stores had buyers. To get stuff on the shelf you needed to get past them. They were experts at evaluating products and would reject 'crap'.

Now we have corrupt and easily gamed review processes and a race to the bottom.
Northern suburbs of Indianapolis. I have two fiber providers, a cable provider, and fixed 5g available to my home. Hardly europe or SoCal.
The major matters a lot.
When I did my PhD, we just created a lab website on it's own domain and applied for a Google apps for education account for that domain and got it. That's been our labs main collaboration tool ever since and it's been six years now.
This has always been the predominant business model for periodicals. The other, much smaller alternative is paying a lot of money for access to what amounts to research, and it barely exists outside the financial markets.
Network latencies and round trips will almost certainly be the primary source of performance issues in any larger microservice environment. If you don’t need that level of scale, that’s great. But once you do, JWTs are perfect for carrying information across the network that may be verified without extra network calls involved.
I'd say that lots of kids and infants dying in the past dragged down the average to seem comparatively low compared to today. Of those who lived past 18, I'd wager most adults lived almost as long as today unless an infection or simple mechanical injury happened.

Cancer, Alzheimer's, CHD, diabetes' complications and pneumonia gets most people these days. If you live long enough these days, either your heart will give out, your circulatory system will leak and you'll die from shock, you'll get pneumonia or an infection. Finally, the vast majority of end-of-life operations are worse than nothing at all by worsening quality-of-life... hospice is better in most circumstances.

PS: follow the holistic/comprehensive list of preventative lifestyle changes for Alzheimer's so you can go out with your mind as intact as possible and stay fit/able-bodied to where you don't need long-term care (LTC). As an example, the grandpa of that young guy from that show Gold Rush; what a full- and active-life that guy had.
And yet when you ask a chess player whether the situation has a tactic or a strategy in it (in some cases both), they can tell you which choice is a tactic and which is a strategy. Tactics are so well recognized that you can practice them: https://www.chess.com/puzzles/rated
The reactor is difficult to turn off:

https://en.wikipedia.org/wiki/Alfa-class_submarine

>The issue was that the lead/bismuth eutectic solution solidifies at 125 °C (257 °F). If it ever hardened, it would be impossible to restart the reactor, since the fuel assemblies would be frozen in the solidified coolant. Thus, whenever the reactor is shut down, the liquid coolant must be heated externally with superheated steam.
You can check Craigslist > services > computer

Alternatively you could find someone on Fiverr

Or potentially you can try me. I've been a professional .NET developer for about 10 years but recently I decided to stop programming as a job but I am kind of looking at part-time and freelance stuff.
Yeah... The whole try/except "in case it throws" without an understanding of IF it should and WHY it might is a huge anti-pattern that creates more bugs down the line than it may potentially solve in the short-term.

If it shouldn't throw, don't try to catch... That is an unexpected failure that needs to be understood.
Who else has the money and drive to pay a bunch of artists—writers in this case—and publish their work.

If anyone did set out to be fair and unbiased the work would immediately be co-opted by someone’s agenda, someone who either has or wants power, or more of it.
Life expectancy != maximum lifespan
Correct

The major concerns seem to be hijacking/piracy, clearance to dock at ports, and the general umbrella of proliferation concerns.

They don't want people taking these and using the material for bad things.

If there was a way around that, then maybe they would be economical. The cheap fuel costs in the past made the NS Savannah non-competitive, but I doubt that's true now: https://en.wikipedia.org/wiki/NS_Savannah
Do you think this is unique to the Python community? Any thoughts as to why it might be so?
Seems the live demos all appear as blank white pages on iOS
The Magically Unstructured Life of a Crypto Baller
"black bar:" https://news.ycombinator.com/item?id=9466887
Yes, SEO is still big business, and it's big business because it's effective. For any term that has even minor commercial relevance, you've generally gotta dig into at least the 3rd or 4th page before you start to see real results.

Google has been successfully gamed essentially for its entire history. The fact that so many technical people believe the propaganda like "SEO doesn't work anymore" just shows how disconnected and gullible they are. And if technical people are naively Googling away, how much hope does that leave for your average citizen?
I don’t understand how that makes them untrustworthy
> You're only 1/4 related to grand children. A strategy of living a long life to help raise a grandchild means that 3/4 of your effort is promoting someone else's genes.

But you are helping to raise 100% of your descendants. I'm not sure it is relevant that your descendants have less genetic material in common with you as you move down the tree.

> Now what if the strategy of those other people is to have many more children, possibly with many different partners, with a relatively diminished per-child investment, reliant on someone like you to help raise those children. Who's going to out-compete whom?

The premise of Idiocracy! In this scenario, though, there could still be benefits of some per-descendant investment. I'm not sure "high investment in few offspring vs. low investment in many offspring" debate really matters to the question of "why stay alive longer than (age of infertility)+(maturation time of offspring)".

I think the answers lie in 'group selection'. Not sure how accepted a theory that is though. An example I've heard (but can't find reference to now) is that the tonsils may serve to kill off sick individuals before they can infect others.
I rate curl | * as low on the vulnerability scale; scale, as in compared to so many other forms of control we grant regularly to unreviewed code. Yeah, it's not great in practice to do this without reviewing the source, but how often do you "pip install" or "npm install" without reading all 1000 lines of code, plus 1000 lines for each required dependency? How often do you compare hashes (if even available" for binary images? I think in the modern state of software, most verification is done via reputation and critical assessment, vs technical review as in times past.
On Netflix there is a three part documentary about Bill Gates. One of the parts is about him funding a new generation nuclear plant.
I'm not suggesting that the beverage tastes of metal - I'm suggesting the can does.
Bad freekin week for famous people. It's almost as if more people die in winter, and this is the leading edge of the people who could reach a global population.
Always stayed away from Intel assembly, but thought I'd have a go at running this. First issue was this is I think, Intel format, whereas I was using GNU as, so I had to make a few changes:

.global _start

.text
_start:
mov $1,%rax # write(
mov $1,%rdi # STDOUT,
mov $msg,%rsi # msg,
mov $len,%rdx # sizeof(msg)
syscall # );

mov $60,%rax # exit(
mov $0,%rdi # EXIT_SUCCESS
syscall # );

.data
msg: .ascii "RIP Tony, Father of Assembly Language\n"
len = . - msg

Then you can run with:

gcc -c src.s && ld src.o && ./a.out
Oh for fucks sake, why do people want to make using passwords so difficult?

No I don't want to memorize a unique string of random gibberish for every new thing I log in to

No I don't want to use your shitty password manager with its half-baked integrations that leave me hanging 30% of the time

No I don't want to come up with special variants of the passwords I know because you have some stupid complexity requirement

Nearly every attack short of actually knowing the password can be mitigated with 2FA, proper hashing+salting, thoughtful lockout policies, and rate limiting.

Why are there so many people who want security to suck so much?
I've been reading - and absolutely loving - As You Wish: Inconceivable Tales from the Making of The Princess Bride. For anyone here who loves that movie (it's inconceivable if you don't), I highly recommend it.
So apparently this is using data from the Dept of Education, but I wasn't able to find anything about their methodology on the site that the paper referenced[1] (footnote #22 says that's the data they're using).

I am curious to know: how are earnings calculated? Are these numbers coming from voluntary surveys or something more reliable?

In any case, this data is kind of interesting but it's certainly not anything that would lead me to conclude that college is worth it. At the very least, I'd want to see some attempt to control for what I'd assume are the most powerful confounding variables:

* controlling for industry (in which industries to college grads make more than non-attendees?)

* controlling for socioeconomic background (do rich kids who don't go to school make less than those who do?)

* and controlling for opportunity (do students who are accepted into top schools but choose not to go make as much money as those who do?)

[1] https://collegescorecard.ed.gov/data/
How to raise capital from venture capitalists?
It is always interesting to read about real life Super person! Thanks OP.
> adults took irresponsible actions and they're simply cast as victims.

This is an extremely optimistic definition of adult, no? I didn't go to school in the US, but if I had I imagine I would have been under 18 while applying to college and applying for student loans.

You could argue that the students are adults in their later college years, but it being the "best worst choice" to graduate and continue receiving your student loan is nowhere near the same thing as having made an informed decision at the start.
Weird that "/products/stainless-steel-wooden-turner" doesn't seem to involve stainless steel at all.
FAA Chief Pushes Back on Boeing Pressure to Return 737 Max Jets to Service
Number of Pixels Used in These Photos Is the Number of Animals Left
I disagree. Learning the ins and outs of the law and of IP negotiations - a very specialized and cut-throat field - in a few days or maybe weeks is out of the question.

If he can't talk to a lawyer, he's going to lose. Period. Maybe very badly. After having already screwed up, now is not the time to half-ass it.

You're not a terrible person but you've given absolutely terrible advice.
> What kind of outcome do you want?

I wish I knew myself better.

Maintenance and taking the product forward will naturally become part of my job, so that's a given (and I'm happy about it).

What can I ask more for is what I'm trying to figure out and having a hard time.

I'm generally creative with software and products but I'm really bad when it comes to negotiations and figuring out a good barter.

I absolutely don't want to take the legal route and want to work something out mutually.
Or, to a certain extent, the graphical industry?
One could also try the data of car sharers with floating fleets ("leave the car legally parked anywhere within their business area") like car2go.

Incidentally, in comparison with car sharing, I hate these scooters. With cars you have to park them legally or the you (the last renter) will have to pay the potential parking ticket. With scooters, people can easily lift and move them, so the last renter has plausible deniability if they parked idiotically. End result? They're all parked fucking idiotically.
I have a clear box of about 50 colorful dice on my desk. I can shake the box anytime I need a strong password. Dicewords.com word lists are an easy way to generate strong passwords completely off-line. If that isn’t a requirement, a SHA256 hash of a photo of the box contents after shaking can easily generate 256 bits of entropy over and over.
I'd say require using one of a list of 2-3 password managers. Then, the user has a master password that they can change if they want to, and can change individual passwords with less effort. Allow writing master password on a slip of paper kept in their wallet for a couple of weeks until they memorize it.

Within the password manager, there needs to be a way to automatically login to their email account to verify accounts and change lost passwords AND a standard way (Call it PWMAPI - the Password Management API) to change passwords non-interactively within every service. Then, with one button in the password manager, it can change all passwords at once, within a few seconds, while keeping backups of old passwords in case anything fails. Heck, make it an automatically scheduled periodic job the user can be notified to do.

This is how to make things easier.
The expiry is one of the tradeoffs to be made. We've also used a kind of emergency switch in the system that expires all tokens that are older than a timestamp system parameter. All this does is force token renewal so legit services continue chugging along while the forbidden will be stopped at renewal time.

In general, I tend to look at token trust as a decaying function of time, irrespective of signatures.
I'd bet it's more than 49%, to be honest. Everyone I know does it. Pick a good password, add a digit to the end, then just increment until it rolls back around. Ta-da!

Our IT server team has been using Microsoft's best practices from the 90s or so, and never bothered to modernize.
Insofar as "Russian military intelligence" is Seth Rich and "fake media cutout" is an independent publisher not beholden to the political interests that prevail upon large American media companies, then sure.

You can dislike Trump all you want, but invoking the Russian boogeyman and smearing honest people like Assange is pretty low. The fact that political parties and major media outlets feel obliged to hide behind such transparently flimsy excuses is commentary on both how far the moral standard has fallen and the empty desperation of our cultural power brokers.