skysight-inc/HackerNews huggingface dataset:
Both options fuck with the competitive free market just the same.
I am a salaried software developer, and my employer requires me to track my time, for precisely the reason you describe. And I still think it's stupid, despite having heard this very explanation at least twice (or thrice, if you count your comment). It doesn't make it make any more sense; it just makes corporate accounting sound like so much smoke and mirrors that accountants and investors willfully participate in. Maybe I'm focusing too much on the fact that those dollars are coming out of their bank account into mine every two weeks like clockwork regardless of the fact that they're pretending that they're trickling two years' worth of salary out to me slowly over a period of seven years or whatever, but it just seems so arbitrary and nonsensical to pretend that they're not spending that money to pay me right now.
Nate Graham! His posts often get quoted by Phoronix (which is in my RSS feeds). I love reading them even though I don't use KDE myself (right now; in the past I ran KDE 1/2/3 on Linux and KDE 2 on Windows).

Why? Because I like to keep a little up-to-date in Linux UI land (why I visit Phoronix). Nate Graham's weekly post are well written summaries which link to additional in-depth information if you prefer. You gave two good, relevant examples of that.
It's unbelievable to which lengths people can go in order to NOT work.
I'm aware of the agreement. But even without this agreement anyone can make a fork and publish his/her own version of Qt under GPL and LGPL.
Well 80K can get you pretty far in Berlin, as opposed to SF. Rent is probably cheaper than Warsaw too.
I think for agriculture the way to go is syntropic agriculture: https://www.youtube.com/watch?v=gSPNRu4ZPvE I've seen people implementing this very successfully, I've been doing it myself for around 4 years now, and its very impressive how much carbon the soil stores after a few years on this practice.
I don't like social auth so I haven't used any of them. But there are several packages for that.
Pot, meet kettle. Ted's been banging on the Xanadu drum for 50 years... if he'd have just bothered to learn to program, he could have implemented it himself, but it seems he'd rather give interviews about it than sit down at a keyboard.
The whole article paints a picture of Microsoft eating OSS OSS projects, but the author begins by clearly stating that the project he is going to reference (Octopus Deploy) is not OSS.

Instead, he is complaining that Microsoft is competing with his own proprietary, commercial offering. I'm not sure why he keeps pushing the narrative that this is bad for OSS, when the only two projects mentioned aren't.

Full Disclosure - I worked in the Azure DevOps org for a long time, and several of his assertions about Microsoft's auto-defacto status for developer tools and services aren't true, or at least weren't true during the time this article was set in (2010-2015).
And sometimes you want a functioning hands-on demo of some open source software that has many moving pieces. If the author has collected a bunch of installation steps into a bash script, I have no problem blindly running it on a fresh isolated VM.

Later on if I decide to use the software, the bash script usually makes a nice reference for starting my own Ansible role or Dockerfile.
Factoring out a comment into code sometimes loses information. I would argue that database_year_offset is not as informative as the original comment. Free form text can say things better than identifier names.
What about the distros that modify the package before giving it to you? I'm thinking of Debian's modification of openssl for example.

https://www.debian.org/security/2008/dsa-1571

Just because it comes from a distro doesn't mean it's from the developer.
Far too late. 10 years to build is optimistic, and that is on top of a good decade or 2 of bureaucracy before even breaking ground.
That is not what I would consider "general computing device", more like "media consumption device", and yes, it is fairly good at that.

I would require a device to be regularly used for content creation as well in order for it to qualify as "general computing device". But pretty much the only "content creation" that I see happening on iPads in normal peoples' households is writing emails. By that account, our smartphones are certainly more qualified for the "general computing device" tag, because those are regularly used to create photos and videos in addition to mails and instant messages.
Tell me how this is different for downloading a binary instead. Unless you get something like a GPG through a completely different channel.
It's not that curl isn't so bad, but that the lack of notarization is really bad. Distributing software safely is still a pain.

Linux distributions have this kinda figured out a long time ago with signed packages - almost a requirement if you want to distribute your software on mirrors that you don't control. This is why it's safe to download a package from a Debian HTTP mirror and install it. The thing afaik any of them still don't do, and is really important too, is checking the signature with a revocation policy.

I actually started writing about how I distributed a CLI for macOS, Linux, and Windows a few years ago but never finished it.

If you are writing Go code you want to take a look at Equinox.

I used it to distribute a CLI in my previous job, and it worked like a charm. One of the things I liked most was that I was finally able to push safe updates because I authenticated every release with my private key, and only allowed users to update if the key matched. If you have a primary and a secondary key, and a strategy to revoke it, this means you have a quite safe release process.

Related:

https://developer.apple.com/library/archive/documentation/Se...

https://equinox.io

https://developer.apple.com/macos/distribution/

https://developer.apple.com/documentation/xcode/notarizing_m...

https://blog.jessfraz.com/post/why-open-source-firmware-is-i...

https://docs.microsoft.com/en-us/windows/win32/seccrypto/cry...

https://docs.microsoft.com/en-us/windows/win32/seccrypto/sig...

https://www.mothersruin.com/software/SuspiciousPackage/

https://successfulsoftware.net/2012/08/30/how-to-sign-your-m...

https://arstechnica.com/gadgets/2012/02/developers-gatekeepe...
> Change your product into a product that threatens their core business model. (for example against facebook you would offer privacy because they could not offer that without weaking their core tracking you/selling ads business.

That is probably fine in this case but what reason is there for them to not lose money to control other parts of the market?

Facebook brought whatsapp, mind you and many others.
As someone who uses his iPad Pro regularly, I love all the multi tasking of the iPad.

I know many have written that they have issues with multiple windows on the iPad, but for me it's never been better or easier. My main gripe is keyboard behavior which is very buggy, but not related to how easy/hard it is to make and move apps around the screen.

The fact is that the iPad is only useful because of its software. In my case it'd be useless without Files, Working Copy, Blink, Wireguard, and Screens. Only 1 of those is built-in and still it's a fairly recent addition. And it's the latest version on iOS 13 which is really the version which turbo-charged using many apps together easily. I use these apps to pretty much avoid directly using my "real computers" as much as possible via VMs or remote access via Wireguard.

But, I think we're only seeing the beginning of the iPad. I can relate to the feeling that "we should have more of what we expected by now", but the fact is that designing these power user interfaces, actually redesigning them for touch while making them compatible with existing ones, is very difficult.

A great example for HN is how we develop like we're in the 70s with text terminals and executing commands. Where on the iPad it might make more sense for the terminal to be rich like a REPL where commands/expressions act more like the results of a Shortcut (rich data, not just text) or code might be edited as an AST instead of the text which allows the concept of a "source file" to go away and instead there be a source database. Instead of trying to rebuild the editors we had we build something else designed for testing, iterating, and managing the AST. Dark[1] is a good example of this, but currently focused on the web.

This is all way out there right now, but it makes me think that the iPad is still just getting started.

[1]: https://darklang.com/
OffensiveCon19 – Alex Ionescu – Keynote – Reversing Without Reversing
It's certainly possible to write more complicated code in a language like D than in Java. I personally find the verbosity of Java combined with jamming everything into a single approach makes Java hard to read.
The Fed Has Bought 70% of Net Treasury Issuance Since October
Using https://old.reddit.com/r/VFIO/comments/eryb71/best_storage_f... setup and truecrypt + zfs
raid with lz4 compression I never see cores even visibly affected by either compression or encryption, the speed seems to hit the actual underlying hardware speeds pretty reliably, and this machine CPU is not anything to be amazed about in current year (Ryzen 7 2700 stock clocks with the performance governor)

Actually I was a bit curious about this so just tried reading some raw images off the zfs pool with no directives against caching or anything to hit the absolute maximum possible read speeds, even with the read speeds getting well above 1GB/sec it still wasn't showing any visible impact on any cores in terms of either truecrypt or zfs. Almost wondering if they're hidden somehow at this stage. If they're not though it seems the performance impact is so low it gets nowhere near restricting throughput compared to uncompressed / unencrypted speeds.
> which give eye-poppingly low margins to the actual authors

You mean exactly 0? Authors are almost never paid to publish in a journal.
I use Dvorak on my Kineses Advantage (and every other keyboard). I tried dvorak layout on the phone and tablet, but didn't like it. I think qwerty's design of making commonly-consecutive letters far apart might actually help here? (Or perhaps the autocorrect is just much better at correcting typical qwerty mistakes than dvorak mistakes?)
Commodore History Part 7 – Disk Drives [video]
> And some random shell script installer is going to better than a dedicated package manager at dealing with the differences between N many distributions and M many architectures?

Surprisingly, yes. Especially for *nix systems where a lot of things (but not package managers) are more-or-less unified. The author may not have the time or desire to learn the half-a-dozen or so package managers and set up a build system to create packages for all of those, and then do the work of getting them into the standard repositories.
The UK government is using the same networks...
Deontological ethics can look perverse if you're only interested in the outcome and not the means. If the means to an end must be just, you'll make a lot of decisions that can look suboptimal to someone who doesn't share your frame of reference.
The town where I live (in the Netherlands) has green waves for cyclists. It's lovely to experience and also a good way for the council to encourage this sustainable, healthy mode of transport.
Telling people you're doing something, but giving them no other options, isn't good enough.

There are roads near me which do "toll by mail" where they snap a picture of your license plate, and then bill you the toll even if you don't have EZ-Pass. There are signs which announce this, but unless you're planning to drive 90 minutes out of your way, those sections of highway aren't avoidable.

Even if there are other viable options, the average citizen doesn't really understand the implication of losing their privacy, so they can't make an educated decision about whether to give it up. A simple sign doesn't solve that fundamental problem.
What are the second to fifth elements of the array A?

A[2:5]

I find that much much more convenient and user friendly than the alternative.
How to Start a Parking Lot Business?
I've experienced this firsthand. It reminds you of who you are in a deep, basic way.
The UK is also at the beginning of post-Brexit trade negotiations with the US trade agreement being a central one. This is going to be part of those negotiations going forward and is all part of the governments strategy.
That is a very low gas tax. In Germany it's €2.47 per gallon/ €0.65 per liter.

Edit: Your numbers for california amount to about $10.6B per year - and the transportation budget for california for the current fiscal year is $23.5 billion [0]. So the tax pays for less than half of the costs.

[0] = https://lao.ca.gov/Publications/Report/3948#Overview_of_Gove...
So are you using the phone as a "hot spot" for the machine plugged into the 65 inch TV?
How to upgrade from Windows 7 to Ubuntu – Hardware and software considerations
I maintain that ".NET" is the single worst brand name to come out of Microsoft. I hope the new dotNet version 5 that is supposed to unify Standard and Core (or leave behind stuff like WebForms) gets a new brand name that doesn't have a period in it.

Of course, knowing Microsoft they will recycle some name so even if it's better the Google Searches will be all screwed up, not knowing if it's the new Brand-X or the old one.
In a capitalist system, the easiest things to raise money for are monuments to the wisdom of capitalists.
> I have to tell stories too because if I don't....

Sounds like reputation afforded to academia (professors) might be inappropriate. Besides, science shouldn't be judged by reputation but by fact and result. The idea of evaluating the quality of an idea by one's social standing is sort of odd... for someone who should be preaching science.
This is akin to reviewing how well a screwdriver drives nails. Yes, it has problems. That doesn't mean it's a bad tool - you're just not using it right. Does it require discipline? Yes, but so does the screwdriver.
That being said, I think jupyter specifically has some legacy issues around format, and I prefer R markdown. As much as I love pycharm, it's never going to do more than replicate the notebook experience.
IMHO, the main author publishes on code UI/UX, the title seems more like click bait. Not sure why it's so upvoted.
TunnelBear VPN's security audit report
It's interesting to look at these slides because I so strongly prefer simple straightforward "ugly" presentations to slick vector art ones that include a timeline from 9000 BC. Slick presentations prime my "this is BS" suspicion.

I know this preference is a trope for people on HN (I mean, look at the HN layout) but it's strange to me that VCs apparently have such different preferences.
Just to add another data point: I asked an Ivy League professor about hype and they said the exact opposite of your Ivy League professor.

Anyway, that's certainly the hype part that your anecdote refers to. Now how about the hokum? Did your Ivy League professor draw a computer on a cardboard box and put a kid inside there? Or did they use it for a bona fide machine learning research project?

I think those are fair questions as there's at least one story of a Media Lab project that misrepresented its technology and did not really perform the tasks which it claimed to have performed.
Ask HN: Why are people claiming IRS FreeFile is equivalent to TurboTax?
With tax season starting, the war between IRS Free File and TurboTax has started. Again.

I just signed up for both, and TurboTax is a comprehensive interview system and FreeFile is ... digital versions of existing forms! The instruction page for FreeFile looks like a 100 item todo list: https://www.irs.gov/e-file-providers/line-by-line-instructions-free-file-fillable-forms#F1040 ... Whereas TurboTax follows a question tree to find relevant deductions.

While I agree TurboTax is focused on scaring you into upgrading (every few clicks it is offering a new upgrade), I find the two services radically different. Why are they being phrased as equivalent?
Why are you assuming that epidemics only stop growing exponentially when they reach population saturation? That is not the case for all the recent respiratory epidemics.

Even if they do, why is 20 a "low" number? They are talking about estimating the current real figure, from the current laboratory-confirmed figure. 20 seems pretty reasonable if a little high, assuming the epidemic is indeed still in the exponential phase.
Nextstrain has a better visualization https://nextstrain.org/ncov
> It takes a certain level of expertise to talk yourself into something extremely dumb.

That's a brilliant line. I'm sure I'll be borrowing it :-)
Dbl.oisd.nl – Internet's #1 domain blocklist
Incubation data of 2019-nCoV virus
Checking in a browser may not be representative. https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...
Classic: Is curl|bash insecure? (Sept 25, 2015 | 163 comments)

Link: https://sandstorm.io/news/2015-09-24-is-curl-bash-insecure-p...

HN discussion: https://news.ycombinator.com/item?id=10277470
The same arguments apply for downloading a binary.

If you want to pull this even further. When is the last time you verified the signing keys of your OS distribution repo without relying on the internet?

A lot of install methods that are not curl/sh are like: here copy this bash line to add apt GPG keys for our repo, apt update and install. A lot of people don't bother to check those keys.
People would lose their shit if it was just an unbuildable pipe of code. “This doesn’t count”.
My kids still use SEs. It's still a very functional phone. The internals are iPhone 6s era (A9). The plastic phone was the 5c (A6, same as the 5) and it's not even 64-bit so it can't be upgraded past iOS 10. (The SE is three generations newer than the 5C.)
As a high school student I got a chance to visit MIT's CSAIL with some other high school students and it killed all interest I had in attending MIT because what I previously thought would be a total hacker and mad scientist sort of place turned out to be a bunch of marketing gimmicks (with a couple carefully managed demos of things that were "cool" more so than useful, new, or innovative).
Nuclear power Weatherwatch: nuclear energy now surplus to needs
A well-balanced research portfolio ought to include long shots. Sometimes they come up big, big winners. But they spend a lot of time looking weird and pointless.

Unfortunately, funding long-shots is really hard. I was going to write "in the present environment", but then I realized that was too specific. It doesn't really matter where the money is coming from. Funding long shots is fundamentally hard, whether it's from private investment, government, commercial, or whatever else you can think of. But it's still a good idea to put a small portion of the research resources into those long shots.

(Now, it may be the case that the Media Lab is a bad place to fund your longshot, but I don't know enough to evaluate that.)
Also works really well here in Copenhagen to get to/from the city centre during rush hour.
The Recycling of Ships [pdf]
You are right but it's the scale that is worrying.

Tech is accessible everywhere. What it does is set certain expectations for users in different countries. In india, most people won't pay for apps and they are not profitable to run many services which big companies do for free.

Maybe it's good in the short term. For consumers, certainly but I wonder if tech will become stagnated like other industries with monopolistic control.
It's still a trust issue. If I'm running a Debian based distribution, I trust Debian packages, and the content of those packages.

It's a chain of trust that can't be provided by web servers and X509 certs.
The Positive Side of Shame
Pcgrl: Procedural Content Generation via Reinforcement Learning
Upgraded my 2011 Hackintosh last year: i7-950 -> x5680 overclocked to 4.25GHz (good enough can probably go up). Upgraded from 12GB RAM to 24GB triple channel RAM (can upgrade to 48GB). Also upgraded from a old 1.5GB video card to the Sapphire RX 580. It was too much of a pain to get mac OS to run with this setup so I gave Windows 10 a try. It works great. I only use it for photography and video work. This setup smokes my 2016 Macbook Pro. I was considering tossing the system but a couple hundred dollars worth of upgrades and new life to a old system.
You need to borrow for investments? I hope you mean for a house
Maybe I would care about the plight of academic publishers if I got royalty checks for all the articles I've published over the past 20 years.
I see nothing wrong with professors communicating the value of what they are building as effectively as possible. If you believe a problem is an important problem to solve then you should work hard to convince other people it is important.

>As for the Media Lab, they're really selling the image of technological progress.

Disclaimer: I've worked with researchers at the DCI group in the media lab on hash function cryptanalysis.

The media lab is made up of a large number of research teams doing very different stuff. It is unfair to just say "the media lab does X or operates like X". Look at the research from the DCI group at the media on zero knowledge proofs systems [0], hash-based accumulators [1], or work on Ring Signatures [2].

[0]: zk-sharks combining succinct verification and public-coin setup https://dci.mit.edu/zksharks

[1]: utreexo: a dynamic accumulator for bitcoin state https://eprint.iacr.org/2019/611.pdf

[2]: It wasn't me! Repudiability and (Un)claimability of Ring Signatures https://eprint.iacr.org/2019/135.pdf
I thought about that, but like falcolas said, they are at least signed and have some attention paid to them.

At one level, any build/install tool is executing extremely complicated code on your machine, and could do lots of weird things. The advantage is that you can learn what it does, and have trust in its authors. So well behaved custom scripts created by a trusted party that has articulated standards about how things should work are much better than using shell scripts from an arbitrary project.

Still, I'd certainly prefer it if the distro didn't have custom scripts either. It would simplify the task of knowing "this is how the distro does things, and there are no exceptions".
As far as program resources go, on DOS, at least, it used to be possible to simply append a file to the executable, and the loader would put everything in RAM. (On the other hand, you do not need a generic web server to serve a single static page; then you don’t need a file system to store one file.)
> was absolutely, postively, shocked that I somehow missed the whole m.2 nvme surge.

I only stay subscribed to the NewEgg emails to watch retail HDD/SSD prices. The prices always amaze me, I member paying over 100$ for a 32mb usb drive and our first HDD in a home PC was a 200 something megabyte caviar.

It makes me wonder what things will be like in another 25 years.
If they're iPads, this is unlikely.

All one has to do is leave them connected to power and WiFi overnight.

It's more likely that the typical cafe checkout iPad is silently updated on a regular basis, after close of business, and the staff don't notice at all; since they're going to be password protected, they just punch in in the morning, as usual.
Has VC Become So Big It Must Be Disrupted?
> if there is a potential security problem and no one is exploiting it, then is it still a security problem?”

Yes, surely? Somebody is probably exploiting it and you just aren't aware, because why wouldn't they have that in their toolbox?
I can trust packages, since they're signed by a developer, or by a distribution. I can't trust that the content of a script I obtained via curl is from the developer.
That's really cool. Though it does seem to remove almost 50% of the benefits listed in this entry, but those seem to be focused on fuel-consuming vehicles rather than bikes.