skysight-inc/HackerNews huggingface dataset:
Well, good, but if customer impact is the only metric that counts, what relevance does severity have?

If you find a RCE vulnerability that never affects your customer, and how much it affects your customer is the only metric by which bugs are prioritized, what relevant information does severity add?

Either it affects your customer, in which case you prioritize a bug's fix by its severity (i.e. simply by how much it affects your customer), or it doesn't affect your customer, in which case you prioritize is by... how much it affects your customer. Either way, you end up prioritizing bugs just by customer impact, which is either measured by the bug's severity (if it affects a customer), or zero (if it doesn't, regardless of severity).

Just to be clear, I am absolutely not arguing that severity shouldn't be tracked, I'm arguing against the idea that purely functional customer requirements should be the only criteria used for prioritizing bugfixes and development tasks.

It's certainly true that "your job is not to build the perfect/best product, it's to build the one your client want and is willing to pay money for", as the parent mentioned. But it's also your responsibility to do the building in a sustainable manner.

Decoupling severity from priority is a great way to run a codebase into the ground. RCEs that are unexploitable today will be expoitable five years from now, after sufficient requirement changes accrue -- and at some point in the future, you're going to have to deal with five years' worth of previously unexploitable RCEs that you have to fix yesterday.

Edit: I've worked for several years on two codebases where customer impact has been the primary metric used for bug prioritization for 15+ years and 7+ years respectively. Both were absolute catastrophes. You could literally crash devices by blowing hot air on them (literally, there was an out-of-bounds access bug in the code that handled overheating alerts and they crashed after a few alerts). An entire team was there just to put out fires, virtually all of which were known bugs that had at one point been deferred because they had "no customer impact" -- until they did.

It's been a very useful experience. Disentangling these things is a very useful skill to have for an expensive, and highly sought-after on the market.
There are efforts to do exactly that. The Cuneiform Digital Library Initiative [0] has some interesting projects you may wish to browse [1] as an example.

[0]: https://cdli.ucla.edu/

[1]: https://github.com/cdli-gh
I think the OR operator comes from set theory and has nothing to do with the low-level boolean flag fieldsets.
Testers are not supposed to judge priority, that's a business decision (that could be based on technical know-how) and as such should be decided by business people aka PMs
My gut reaction to the headline and the article was that it's a mistake to make such a distinction. However, if you look at QA/Support owning severity, and PM owning priority, it potentially reduces conflict--what do you mean this crash isn't critical?!

I think they are highly correlated, but they occasionally diverge.
It's easy to say this was going to happen. (Especially after it happened.) But it's not a natural law like boiling water burning one's hand. Proteins are always going to be damaged by heat. But here we observe due process being violated. It's not a natural law that due process is going to be violated. Violations depend on attitude, checks and incentives. As a society, we can shape those to a large degree!

We could have complained earlier, in other instances. You can say we should have been more alert. There were victims we ignored. But that does not invalidate our complaints now!
MadMapper – 3D projection mapping and LED Light Mapping software
Did you mean `str | int`?
I'm tired of excuses for inferior tooling. If you truly know CSS, Tailwind is a waste of time.
Orthographically speaking, 'p' is the first consonant, 'r' is the second consonant, and 'k' is the third consonant. Phonetically speaking, 'k' is the second consonant.
An architectural historian's take on Trump's condemnation of modernism
Book review – Machine learning with Python for everyone, by Mark E. Fenner
So a house number can be a fraction? That's something that should be added to https://www.mjt.me.uk/posts/falsehoods-programmers-believe-a...
First Case of Coronavirus in Brazil
Virtue signaling.
http://ai.berkeley.edu/~cs10/labs/cur/programming/simulation...

There is nothing left to spit out. I can address some of your points but overall I will just be reiterating my original points over again from a different angle with more examples so you and others can understand.

First based off of the link above ecosystems are indeed in equilibrium.

Second even at an equilibrium things can still evolve. There is a concept called genetic drift where genes and culture changes within the bounds of natural selection. So imagine a local optima that involves a multitude of solutions that are equally optimum. Ecosystems and biological creatures who have hit this equilibrium can still evolve by oscillating among all the solutions in that local optima. The term is called genetic drift but the concept applies to topics outside of biology.

Third, natural selection is not strictly a biological concept. It has broader applications that most people are aware about on some level. Genetic programming is a popular example where the primitive s are not genes but computer instructions.

What people aren't aware about is how natural selection can apply to macro concepts and systems where the primitives aren't clear. Things like culture, civilizations and large systems and Anything that can reproduce and mutate are candidates.

There are multitudes of cultures and economies and systems of government that go through reproduction, death and mutation across huge timescales. Cultures that you see today are ones that survived from the past because they are the fittest.

Easter island involved a tribe and culture that overloaded. The culture was centered around status and over exploitation of resources resulted in that culture dying out and not being present today. All we have of that culture today is a "fossil record". Many cultures in the past have self imploded like a cancer and were naturally selected out. In the natural world you should see ecosystems that are in equilibrium because the systems in equilibrium are the only ones that can survive. Evolution at the macro scale can also have effects on the evolution of lower level biological systems as well.

Take for example the evolution of an efficient predator. Biological creatures tend towards greater efficiency but if a carnivore that is too efficient exists in an ecosystem it may kill everything and overload system. Hence most ecosystems have creatures that aren't necessarily the pinnacle of efficiency. Ecosystems where creatures are imperfect and just good enough to maintain equilibrium within the system are what you tend to see.

For humanity in my personal opinion we are currently on our way to overloading the world. Aspects of what we are culturally and biologically will eventually be culled in a selection process that will arrive in the far future.

I'm also not talking out of my ass. This stuff is really studied in academia. See below.

https://www.pnas.org/content/114/30/7782

Fourth. Do not tell me to "spit it out." It is rude and if you do it again you will face consequences to the extent that the rules on this site allow.
Deaf moths evolved noise-cancelling scales to evade predators
SprintWOW: Delight your team with this Agile Retrospective builder
"Just take politics out of the equation! Or more precisely, take "democratic choice" out of this particular policy decision!"

This is such a scary sentence! The problem of climate change has been cause precisely by a lack of democracy. The military, the large oil refiners, the design of our infrastructure has been deeply affected by corporate priorities at the expense of a manipulated populace. We have climate denial in the US in large part because of corporate propaganda (and the fact that if people's oil sector jobs disappear there's no organized democratic approach to help them, they're at the mercy of the private sector).

Furthermore, real democracy would include all the people affected by climate change that didn't cause it! The people of the Marshal islands should certainly have a say in how we approach this problem. Saying we don't need democracy is an extremely America centric approach.

In the circles I'm in, we talk a lot about eco-facsism, which is the way the ecological crisis will be used to promote fascist policies with a green tinge. These include blaming immigrants, cracking down on poor people, and denying democracy in favor of the technocratic actors who caused the problem in the first place.

We need the opposite! We need complete renewal of democracy and democratic practice in order to solve these problems. This idea scares the powerful because solving this crisis necessarily requires democratic control of major parts of the economy, which is a threat to the existing beneficiaries of the economic system.
Wow, there are more: https://www.reddit.com/r/mildlyinteresting/comments/6tk9q4/t...
The vastly different homelessness rates between countries suggests otherwise.
Sure, I was just responding to the OP's claim that these two names would sound similar in "Cockney".
Hi,
We just launched a new product, SprintWOW that is designed to collect various data throughout the agile sprint to corroborate the team's performance. The platform empowers event recording and also team input capturing to build an infographic like presentation. We really appreciate any feedback. Thanks!
Those are all real problems but there is an insidious one where you pretend to poach an employee from a competing firm but instead just do everything you can to brain dump them during the interview.
All the good names were already taken on npm / GitHub: git, git.js, js-git, es-git. "Isomorphic JavaScript" had just been coined and was trendy at the time (2017ish, see https://en.m.wikipedia.org/wiki/Isomorphic_JavaScript) and "isomorphic-git" is unique enough to be Google-able.

Naming things is hard.
Yes, but they are worth waymo than your typical startup options.
Apple allows Electron apps again on the App Store
The author said that the best platform to run ublock origin is Firefox, why not use it ?

I only use Chrome for Goggle related stuff anyway, all my browsing goes through Firefox.
Dynamic page content without hosting a backend. Backend hosting can be enormously complicated when you just want to be able to edit a few fields in the page dynamically.
Is WebAssembly the New Adobe Flash?
As we all know, every Wasm program is considered closed source software just like Adobe Flash apps and for some reasons I'm getting a little spooky because compared to JavaScript everything looks transparent, even with obfuscated scripts I personally can still understand how everything works and can easily detect malware inside every codebase. Now WebAssembly is like Flash and I think everything will get scarier because you can't see what's under the hood and many companies and hackers will try to exploit things just like Flash apps and even the most paranoid developer somehow will not detect a hidden malware. Is it just me or dark ages are coming on how we build web applications?

Edit: I forgot to mention that 3 of the 4 companies involved are closed source lovers. Don't get me wrong, last time I checked Android and Chrome were partially open source and you don't have actually full control of everything.
Yes but what is the point of severity _and_ priority? Why not one field that's first estimated by QA and then updated by project manager when the clients needs are known?
I'm sure that in an actual project, you can use tree shaking or a custom build to avoid including components you don't need.
I liked your multiplication !

But I think it should be similar to risk calculation, multiply by the "impact" or "damage". A typo might offend a small number of people but have a big publicity impact
Maybe this is something JIRA-workflow-specific?

Here in pivotal-tracker-land the product manager controls priority by ordering stories in the backlog. There is no need for a separate 'priority' field because that is implicit.

FWIW, there's also no explicit 'severity' field; the PM is expected to understand all the factors that make issues important and order the backlog appropriately. If you need more categorization, you can apply arbitrary labels.
Yes. The "ohchr.org" is the "Office of the United Nations High Commissioner for Human Rights". I would imagine that's enough weight to warrant a local inquiry.
No, we need "smart" appliances to adapt automatically.
.git repos/.env and HTTP 500 error pages are safe against curious eyes
This is just typical "will it happen or won't it" pre-Olympics FUD. It's a perennial clickbait theme that always works.

http://aroundtherings.com/site/A__74354/Title__IOC-Chief-Can...

https://www.cntraveler.com/stories/2016-02-04/should-the-201...

https://www.theguardian.com/sport/shortcuts/2012/jun/12/coul...
My brother and his group of friends are all going to coachella and are talking about concerns with coronavirus, as its heavily visited by international goers.

Apparently in the past, a huge herpes outbreak occurred, so its a good litmus for massive spread of something.

Wonder if events like this will also be cancelled.
> But maybe that's infeasible for deeply nested structs.

That's the crux of my issue. If it was only for a single, un-nested field then it would be trivial.

I am currently solving it by walking through the whole struct, but that is not-ideal.
I've been meaning to for over a year :)
Maybe this will motivate me.
Exactly, we owe a lot to those pioneers that started innovating half a century ago. About five years ago is when non subsidized renewables caught up with just about everything else in terms of unsubsidized cost/kwh. By now, coal plants are going bankrupt and people have all but stopped building new ones. Gas plants are not far behind. I'd say another five years of price drops will push that over the point where that becomes equally uneconomic. Most plants under construction right now are extremely likely to be retired long before their projected end of lives.

To preempt the inevitable "but ... we need unspecified amounts of reserve capacity for when the wind doesn't blow and the sun doesn't come out" croqs. This is a real problem that is easily addressed with 1) batteries, cables, and excess capacity (name your safety factor; 10x is feasible and probably still cheaper if needed). Batteries give you local energy buffers. We've used cables to move power around since electricity became commercially available. Multiple interconnected production sites distributed across every country (as well as off shore) can absorb any amount of clouds, or other weather phenomena that might temporarily cause a continent lack of wind & sun. And of course there's no rule that says we can only cover 100$ of our energy needs. A few extra panels, wind mills, etc. can push this to 200, 300, or more percent. Also the excess is actually useful for doing stuff like generating synthesized fuels, desalinating water (or condensing it from thin air), etc.

My main argument here is that clean energy is about to create an economic boom that is similar in size to what happened when we discovered fire, coal, and oil (in that order). Historically every time we reduce the cost of energy, we've had a massive economic boom. IMHO we're on the edge of the next one which will be powered by dirt cheap and plentiful clean energy that we can consume by the twh completely guilt free. The main problem in this space is that people don't see the big picture. Too many tree huggers (no offense) and not enough people with vision.
Nassim Taleb (author of “Black Swan”) wrote a quick mini paper on the risks of Coronavirus back in January. I think this crowd on HN would be interested:

https://www.academia.edu/41743064/Systemic_Risk_of_Pandemic_...
The FCC to Field More Comments on Net Neutrality. Maybe They'll Stop ID Theft?
Unfortunately that's what voters in left-leaning states with their sizable homeless and illegal population subscribed for - budget, safety, health and general "quality of life" emergencies
More info on this here: https://news.ycombinator.com/item?id=18734999
The person you are responding to is saying, yes, "cosmetic stuff" might be far more important. So it's more important! Why have another dimension of assessment where we label it less important? Why not only have the dimension of assessment that actually matches the clients' needs?
It seems to me that the Javascript runs in the client.

The Javascript side calls the system via the local network, passing through this router: https://github.com/neutralinojs/neutralinojs/blob/master/cor...

I hope that there is some form of authentication to make sure no random web apps are accessing the API.
I had friends that had a 1/2 address in Chicago, sending them mail was a nuisance. Even the Post Office didn't know how to find it some of the times.
Not the viewers of John Oliver.
Ive been somewhat surprised at the coverage or lack thereof that this story has been getting on HN.

This virus is disrupting manufacturing from China in a major way. It seems like one of the biggest tech stories of the last decade at least, and for some reason the stories about it seem to drop off of the front page really quickly.

Are people flagging these or something for not being tech? Any of my network who does manufacturing is pretty concerned right now about supply chain.
Is the free tier for this something that's valuable or do you realistically need the pro version?
A tree-based introduction to backtracking
Microsoft is way less interested in selling your data to third parties than Google - ads are not the majority of their income
"Once Google blurs an image, the effect is permanent,"

What's not clear to me is if you can put in a request to not have future images blurred (or if a new owner can make this request), or if you can blur images of the property from before you bought it.

Apparently, the current owner of this house bought it in 2013, but Street View has blurred out 2 images from before that. It's possible that the previous owner wanted it blurred, too. Who knows?
And welded people into their apartments so they couldnt leave no matter what, regardless of if they had it or not.
9% of resolved cases have ended in death. It's pretty serious.
This morning I paid about 1.68 euro/L as a consumer for plain gas/petrol here in the Netherlands.
Show HN: Resume Screening by Potential Coworkers, Not Recruiters
If you truly know assembler, C/Python/Ruby/Go is a waste of time.

See how dumb that sounds?
https://gisanddata.maps.arcgis.com/apps/opsdashboard/index.h... and https://www.coronaviruschart.com/
wow! neat animations, reminds me of https://waj.io/pb
Google did the same "embrace, extend and extinguish" play to Java on mobile (Android) and to Firefox on the web (Chrome): "hey, we love you, all on the same boat... Well, I guess we are a bit better now... Alright, now we call the shots".

Anybody worrying about '90s Microsoft should be much more wary of Google by now, and anybody working at Google pretending this is not going on is simply deluded.
I think we're more like a first-world banana-republic.
They do stop you from breathing in contaminated particles, from spreading them when coughing / sneezing and they stop you touching your face with contaminated hands.

They aren't perfect because you still need proper technique when removing them and they "leak" along the sides etc. Still better than nothing, especially in crowded places.
The phrase "there are multiple papers" with no attribution should be considered as something analogous to a code smell.
In my area of software, we provide customised solutions to large enterprises. We have an app that takes in a lot of dimensions about each issue report and spits out an "objective" severity. This app has been honed over 20 years of reviewing issues. That's the only severity that's allowed into JIRA. By default, the priority is set the same as the severity. When we review the issue list with the customers, however, they are free to adjust the priority according to their unique business needs, and developers work on issues in priority order only, not severity. It's a good system, and it ensures that we're working on what the customer needs and not our isolated view of severity. Granted, we will consult with the customer during triage and give them a steer based upon our experience, but they have the final say.
It's been about 15 years since I last installed and configured GNU mailman but I thought it was a solid application for what it does. It's great to see UI improvements in the web interface side of it.

To save others from having to use a search engine, the project page is at https://gitlab.com/mailman/hyperkitty with documentation at https://hyperkitty.readthedocs.io/en/latest/
Is Gmail hiding Bernie’s emails to you? How inbox filtering may impact democracy
When I first learned about Tailwind I though "wow this is amazing!", but it quickly became obvious I was more or less learning another "language", which I really didn't need when re-entering the crazy world of frontend.

I might reconsider it again once I am more comfortable with what frontend has become, but that is still quite a bit away.
Sold for 3.5 million in 2013. Undoubtedly worth more much now. https://streeteasy.com/building/75-and-a-half-bedford-street...
Is it a down market? The bounce is already starting after two days of panic.
I'm not concerned at all about getting the virus or having an outbreak in my community. That's part of life and we'll deal with it if it happens. But I am concerned that people may start panicking and become irrational. There's so much fake news out there about this. People will be panicked into buying all the food they can (whether they need it or not) and stay at home. Sort of like a snow storm forecast but worse.

News outlets really need to cover this responsibly and not incite panic. Those that do ought to be held accountable.
Is there a production-ready CSS purger that's not written in JavaScript? Last time I looked I couldn't find any.

I'm not particularly against JavaScript, but I'm not willing to install and use npm and several hundred dependencies.

All documentation for purgecss always includes postcss and a gazillion other packages I have never heard of.

Maybe something in Go, as a single executable?
62% of ad revenue goes to publisher so there is a clear incentive to keep people outraged.

https://ibb.co/k8F413r
That article actually links to a HN discussion (about the same article) from 2013[0] with more examples, which does indeed point out that street numbers do not need to be integers

[0]: https://news.ycombinator.com/item?id=5791489
Its still not great though :( (relatively speaking)
In the words of Galileo, "Mathematics is the language with which God has written the universe."
What's happened to TC recently..
Google Takeover Target Trimmed Assets to Avert FTC Review
That answers none of my questions?
I didn't realize it, but the stream is actually starting now (around 9:50 AM Eastern), so I may have jumped the gun.
Here's the floorplan: https://www.zillow.com/homedetails/75-1-2-Bedford-St-New-Yor...