skysight-inc/HackerNews huggingface dataset:
Actually, that's 2 different points of view on democracy: do we elect people to to do what we want now or to do what is best for us in the long run ? And who is "the people" ? The majority of the numbers (without any though for all minorities) ? The loudest minorities ?

At best, both would be same: elected people would explain to the people what is best for them and convince them, then people would want what is best for them in the long run.

But sadly, nobody like to be sacrified now for the long term better good of all. And politicians need to be reelected. So politicians have to hide and manipulate to some extend (for what they think is the greater good of most of the population)...

"Crowd wisdom" is nice for really specific matters... but not really for managing a population with diversities in the long run.
From the same source:

When choosing a plan, the optimizer only peeks at the bind value during the hard parse. This plan may not be optimal for all possible values.
Rallyhood exposed a decade of users’ private data
wire: https://github.com/wireapp

session (very bleeding-edge p2p signal fork) https://github.com/Loki-project / https://getsession.org/
The language has a lot of syntactic compromises, because it has a design goal of being familiar to users of C-family languages like C, JavaScript, Java, C#, etc.
> It's simply not possible to learn vi by just using vi.

I did. I learnt vi when I was told go fix this file on that computer, you have ssh, x forwarding won't work because you have 3 hops (embedded devices that won't allow forwarding of any kind), there is only vi on the box.

So I figured out how to use vi. It is not rocket science, there is not that much to learn, vi muscle memory takes time but also not even that long I think.
Creating a Pencil Effect in SVG
They don't go to prison for not having a TV licence. They are fined (I believe incarceration is an option but the courts apply a modicum of common sense in this regard).

However, some people still don't pay and ultimately end up in prison for non-payment of the fine.
I didn't for a second mean that they should be used instead of Greek; just that 'we do it too, so don't be surprised that somebody else abbreviated things with their script'.
WebAssembly hype is also considered harmful.

"Not So Fast: Analyzing the Performance of WebAssembly vs. Native Code"

https://www.usenix.org/system/files/atc19-jangda.pdf

SIMD in PNaCL

https://developer.chrome.com/native-client/reference/pnacl-c...

Currently at phase 3 on WebAssembly

GC in PNaCL,

https://chromium.googlesource.com/native_client/pnacl-llvm/+...

Currently at phase 1, on hold due to reference types, and still remains to be seen how to proceed.

Tail Calls in PNaCL

https://developer.chrome.com/native-client/reference/pnacl-b...

Currently at phase 3.

WebAssembly is so much better than the migration documentation from PNaCL into WebAssembly is full of "Not Implemented", "In future HTML 5 API", "Being worked on", ....

https://developer.chrome.com/native-client/migration

The irony of all of this, it that Chrome and Safari (mostly due to iOS) are what most developers nowadays care about, so we might end up with WebAssembly that works best on Chrome, coming full circle.

And the current WebAssembly development experience is also not something to be proud of, see Ashley Williams talk at WebAssembly Summit.

I do agree about the sore state of Android NDK, despite many improvements in the last 10 years, to the point that I think by making it such an unbearable experience to use C and C++, it is one of the mechanisms Google uses to improve Android's security.
What's the best way to constructively critisize someone's code?
It’s a noble thing to follow a vocation without being driven entirely by self interest.

In contrast, once market forces were unleashed in academia, good will built over decades was lost and a lot of great people quit. Very hard to get that good will and sense of vocation back.

Not everything in life has been to be run by markets driven by self interest. Some things do better without them.
It's an ego thing to want to work with someone just like you instead of adapting yourself to others. It's basically bro culture. It's kind of what's wrong with technology culture.

Give me someone who is talented who makes great code so I can be home at 4:30pm and I don't care what their personality is like.
Additionally someone who tells me when something is an issue even at my ego's expense is extremely valuable, over back patters and schmoozers who just want to keep everyone happy. That leads to a terrible product. I would not like to see whatever product you're working on is like.

You all should take a long look at yourselves and ask why you have to work with people who are just like you instead of being adaptive to other walks of life, personality, and backgrounds.
Try getting out of yourselves for a minute. You might even learn something now outside of your own tiny tiny worlds!
I am curious as well; this still looks like too much plumbing to be revolutionary. It is too close to what we have been doing for years with mainstream languages and tools.
In some climates, environmentally, that might be a reasonable classification.
Session Private Messenger (P2P Signal fork)
> So far I haven't found a good reason not to write tests...I don't quite see how tooling will get rid of the need for tests.

I write device control software. It’s very difficult to have true automated testing of things like drivers. You can write unit tests for subsystems, like packet parsers, but integration testing generally requires good ol’ “monkey testing.”

“Just write a mock!” Is what I hear all the time.

Mocking a device is a massive project; potentially larger than designing the device, itself. Remember that the mock needs to be of unimpeachable quality, and also needs to do things like simulate adverse signal environments.

DX for that kind of thing can be awful.

As far as basic DX goes...

Most developer tools are wrappers for command-line OS tools, and it shows.

They can also be quite buggy, and we accept this bugginess. I use Xcode, which is quite “crashy.” I am constantly fixing issues by deleting the build folder.

Back to testing...

I prefer test harnesses over unit tests. I write about that here: https://medium.com/chrismarshallny/testing-harness-vs-unit-4...
It's funny that if you invert the sentences, they even kinda slightly make some sense.

Small companies are similar to capitalistic free market. They have no plan, but everything flows from the engineering. They value innovation over anything else. So it makes sense to run everything like a lab where nobody knows what they are supposed to do but cannot be easily replaced. Only a few elite people get to work on their own pace without turning on their brain. Personally I like it but I'll admit that it never works. As a result, they always strive to deliver tomorrow's technology yesterday.
I don't think so.

Signal might be open source but the servers are still run in the USA and thus are subject to the US "legal system" (which in turn is subject to the mood of its president).
WinDirStat Developer's Critique of Git
How does he harass you?!
What if the chatbot asked questions and created a resume for me?

What if the bot emails me to ask the question "What are you working on?"

What's new?

What have you worked on these past few days?

And use the answers to create a constantly updated resume.
Three Pillars of Fintech
My point of view is different: there has to be a really strong reason to move my eyes from the code, and in the editors there should be respect for that. For example, I don't want to move from Atom to VSCode because VSCode has those huge icons that take space and distract me, when all I want in the default editor UI is the project directory tree and the code. Everything else should be opt-in.
We’re referring to the ability to remap RX memory as RW without the JIT entitlement which is normally needed to map RWX pages. The author calls it an (ab)use because mapping RWX is prohibited by the system but RW+RX in aliased memory which effectively achieves the same purpose is allowed. This ability is what I hope Apple doesn’t patch at a misguided attempt to fix a “security issue” (which I argue is not).
The problem with developer tools is not technical, it's all about the selling part. If you make a new superior developer experience, you think developers will instantly see the benefits? haha! You first have to teach them, then after a few month if you are lucky you will get a "aha, now I understand". So first you need to manually educate each user until you have a critical mass. Then you need to market and hype your product. So that developers will tell each other how cool your new technology is. Continue with that a few years until there are code in production that use your product, before even thinking about a business plan. So there are few options, either you have enough money so that you do not have to "work" again, and can spend your time making new tools. Or your current employer lets you work on the tools. For a startup working on developer experience (language and tools) I would suggest a 10 year runway (funding) and that 1/3 of the budget goes into educating users and 1/3 goes to marketing.

Any software business that is profitable, already have code in production, and that code need to be maintained. So instead of creating a new better experience, you can make the current experience better. eg. putting rockets on a horse, rather then creating an automobile.
The first ransomware payment I saw predated Bitcoin, and had the victims use a Western Union money order.

It's definitely an inhibitor for the attacker. For a start, it took days for them to get payment. The current "our Onion site will detect the payment and release keys automatically" took a human workflow, which had to impact their scale. I have no doubt some sort of mule received the payment, but it's still much more traceable if overseas LE actually wanted to investigate. And managing that mule again had to hurt scale. The amount of ransomware we see today could never have happened without Bitcoin.

Edit: that too started with an open RDP server. All these years and we're seeing the same vectors in this write up.
It also doesn't matter that it's Amazon Prime, the Prime part has no influence on whether or not you risk buying fakes.
Connections is a fantastic series, it's a lot of fun and I loved it as a child.

My concerns about it is that too many people seem to imagine that because historically an outcome had a cause, that therefore that cause must have been necessary, and that therefore the outcome could never have happened without that specific cause. If they Fluyt, a type of Dutch cargo ship had not been invented, would we really have never developed plastics? So the series provides a very valuable insight into historical processes, but some people seem to take that to implausible extremes. A case in point is the many examples of technologies being independently developed by different people under very different circumstances.
This. Despite latest <libname>-cli trend, anything slightly more sophisticated requires to create a structure, then create structures in nodes, then a configuration structure, structures all the way down. One could object that everything we do is structures, but there is no ui to these, only a text file and a formal documentation (if you’re lucky).

Text files and their disconnection from a documentation is a root of all our evils. Not only they diverge with new versions of everything, but there is a constant attention switch (stacks of them!) and unnecessary diving into things that may or may not be important to the development process. There is no way to omit these checks when you learn or return to an idle project.

I have a long time idea that every config, format, api call, and so on should come with inseparable documentation ui (+rationale, examples of use, best practice links, pre-configuration, diff/merge views, etc). Yes texts are simple and easy to read, but we also write. You can make text from a structure in O(1), but you cannot make a knowledge from an empty file in O(sensible), for any sensible sensible.

Not arguing on salaries though. Even pretenders who have no clue can take a great cut off this nonsense.
Is this a truly decentralized version for Signal? Is such a thing even possible?

Super excited to see more focus on non-centralized applications with privacy in mind. Matrix is also working on a pure p2p mechanism too.
Amazing article. Introduced many ransomware topics to me.
This is the “perfect solution fallacy”; just because Signal doesn’t check all the boxes, doesn’t mean it isn’t an improvement over the existing situation. Secure communications is the immediate goal, nation sovereignty secondary.

Looking at the other comments, the European alternatives don’t look very secure, so it looks like they prioritized security here.
Can you use it like a regular bank account? The two main things I'd want from it are the ability to use it for paying bills (credit cards, mortgage, utility...) and writing checks.
I think the comparison with an electric car is to illustrate that this cloud solution is a waste of energy.
wire.com is a good option. Open source, chats, calls, video calls, web app, phone app, etc.
I honestly don't think Amazon really care, unless you sell fake Amazon branded products.
Who else here loves the Berkshire Hathaway website? Yes it's outdated and not exactly pretty but it's so 'cut to the chase' and easy to navigate. I see why they never changed it. A bit like Warren and his house that he has lived in since 1958!
It goes without saying – things that don't need to be said
I don't think that SPA's are necessarily bad, just that they are used in places where server side rendering would work just as well for a lot less effort. Use the right tool for the job.

> ReactJS in my experience makes development faster, easier, better organized and more enjoyable.

Maybe it makes development faster, but in my experience it makes debugging someone else's code a whole lot more difficult. CSS for example. It seems nice to define the style in the same file as the component code and it makes development a little bit faster. But when you have to debug, it's far easier to have styles defined in classic stylesheets in a different file rather than trying to track down the location of some dynamically generated CSS class. (I know as I have been degugging code that was written by an agency, and the CSS styles are defined in a mix of both React files and normal CSS).

From your list of benefits I don't see anything that couldn't be achieved with sever side rendering and a bit of jQuery. If your front end needs to have a lot of user interaction, then SPA's will be the correct tool for the job. For most web apps they are overkill.

The React frontend we have at my current workplace is incredibly bloated compared to a similar complexity website I created using Django and Jquery. Doing certain simple tasks is like pulling teeth.
Draw needlessly complex diagrams in the console
Iran lawmaker says 50 dead from coronavirus in city of Qom
The EU budget is 148 Billion Euros. Surely, if they have a requirement for a secure communication app, they have the wherewithal to build one for their needs, that EU citizens and others could then use if they so chose? Essential knowledge is definitely public.

This is not about 'Signal' it's about why governments can't/won't deliver on so many issues they themselves deem to be very materially important to them, particularly in the area of IT.
Are you having intimate romantic relationships with all of your co-workers?

If they get me out of work at 4:30 pm and keep the project I'm working on in quality code so I have less fires to deal with, that's good enough for me.
That’s a pretty unfortunate interpretation of my comment, and not entirely logically consistent either.

I mean, if one person who rejects bro culture only wants to collaborate with other people who also reject bro culture, does that mean they are now proponents of bro culture?

I also find it frankly a bit weird for you to make grand sweeping assumptions about who some strangers on an Internet forum choose to associate and collaborate with. How do you know people here don’t work with people from other backgrounds?
This.

Why do we need frontend routing?
If your net worth is low enough that this would be a major problem then yes, this wouldn't be a good product for you.

For people with higher net worth, constantly having a buffer that is uninvested loses you more money in expectation.
I wonder if the ML would also recognise hand-drawn licence plates?

https://papersplease.fandom.com/wiki/Fake_passport
It wouldn't liquidate your entire portfolio, just enough to cover your spending.
Signal servers only know who talked to whom, but otherwise are physically not able to see even a smattering of the contents of the communication.

Correction: The signal servers don't even have that bit of metadata. See [1], they only store the last time that a user connected to the server.

[1] https://en.wikipedia.org/wiki/Signal_(software)#Servers
Mm, to me that feels like an abuse of fonts — it's inaccessible at least. It makes me sad that they don't bother using the Unicode codepoints corresponding to those symbols if they exist.
How is it not the same? They are both permits to allow you to do something.

Lose your license, can't drive. No TV license, no TV for you.
Improving Accessibility in Unity Games – Part 1
I emphatically agree. There is something that walking does to your brain that really helps you see the big picture.
Outlook add-on to give the ability to "undo" sending email. It just mimicked the functionality in Gmail where it holds your email for 10/30/60 seconds before sending, which gives you a chance to stop the message being sent if you notice an issue. For some bizarre reason Microsoft built this in their web app but never in the desktop version of Outlook, which is what most people in big corporate environments use.

Finished the project, built the tool and it worked great, had a bunch of people using it. Then I got to the point of having to actually distribute/market it and I gave up - the idea of having to actually support a desktop application was just too much for me.

I'll probably throw the code up on GitHub at some point so people can still get some value out of it, since a lot of people have been asking.
Something I'm dealing with too. I've found that to enjoy programming you really need to:

- Stop comparing yourself to other people,

- Shut yourself off from new tech and "Show HN" every now and then, to focus on what you want.

- Have a project which isn't too serious and doesn't stress you out financially or burn you out (a game, invention or experimental project is usually good for this)

- Lastly try other forms of work/exercise to help you switch-off. When you come back to your work you'll have a little more appreciation for the craft you've dedicated a decade too.

Remember that these points are easier said then done... I'm still struggling to remember the joy of programming...
I would argue that being able to run arbitrary code that I have authorized on my hardware is not a security issue, but Apple clearly disagrees :) I would expect Apple to patch ptrace rather than virtual memory remapping, in this case, since there really is no reason that an application that is not spawned by debugserver "needs" to be able to request PT_TRACE_ME. But since this doesn't really affect most users, maybe they'll let us have some fun for once…
> I live in an area with very hard water (around 300ppm)

Tangential, but being curious how hard that was relative to mine led me to discover that Thames Water (i.e. only useful to anyone reading in London) has a pretty good page at [0] - a summary on the site itself but the PDF is really worth a look, lots of numbers. Maybe it's a regulatory requirement, but I wouldn't have expected it to be so easy to get so much information from them about my specific (it serves many districts in and around London with different sources and equipment) water supply.

[0]: https://www.thameswater.co.uk/help-and-advice/water-quality/...
They should have used XPointer instead of reinventing the wheel. It has a much more effective syntax.
When the government in Germany does IT projects, they usually burn millions of Euros even for simple projects. And then, years after the planned rollout, the project is still unfinished and no politician wants to touch it anymore.

My favorites was the "special email inbox for lawyers".

So, I am somewhat hesitant to let the EU develop a chat client.
There's built-in "Reader View" in Firefox (both desktop and mobile).

https://support.mozilla.org/en-US/kb/firefox-reader-view-clu...
The author mentions that there’s no hinting, which may explain what you’re seeing.
Hm. Actual deploys? How about a GitLab CI pipeline with "when: manual" tasks for PROD/LIVE deploy?

But, yes, putting the how to deploy into the README.md can be done in 5 seconds whereas setting up a CI/CD pipeline is a lot more effort. So I guess frontend devs just have to be tamed :)
I've been following nim since it's inception and I'd report myself as "never used the language" as I've only built hello-world type test programs.

I like the idea of static, compiled python but it's missing a lot of core libraries and what are there always look a bit disappointing to me. So I'm still in waiting for it to catch on phase and belive that 25% is there too!
Oh sure but that actually predates Cassandra. The Dynamo white paper is one of the things that kicked off the NoSQL movement. In other words it's not something they created to "take on" Cassandra.
In the same way, is paying for a Netflix account a licence then? No Netflix subscription, no Netflix for you? Or how about your rent, is that a licence, too? Because if you stop paying your rent, you can't live there any more.
Ask HN: Should I change my passwords frequently?
That seems to be the general guidance (my company forces us to change our system passwords every 60 days), but I am unsure why this is the case. If someone were to bypass / obtain my password, couldn't they do it immediately? If changing passwords is helpful, how frequently should you do it to be effective?
A site about UX that uses a fixed-sized font with horrible spacing? This I about the worst website UX I can imagine... Long live reader view...
I found your interpretation of my original 'snide' comment pretty unfortunate.

And not a single thing you just said makes any logical sense.

I do know I would never want to work on any project that you're in charge of because I guarantee they're nightmare environments.

Best of luck to you nonetheless.
neo.mjs looks so promising. I‘ve been through with all the examples and testing around with it. Can‘t wait till I get my hands on it for a real project soon. I‘d love to see the community grow even more. Great work!
My neighbours, who are from Germany, have praised the simplicity of the financial side of the NHS compared to the German system. I was quite surprised by this!
The reason you use React Native is because you are platform independent, if this doesn't integrate with Android in more or less the same way it's a hard sell.

I'm working with this myself (painting over WebRTC frames) and it's definitely not out that different by itself comparing Android to iOS.
Well they could use xmpp with omemo.
Changing passwords frequently leads to trends in password reuse. Ie increasing 1 to 2 and then to 3 etc.

Best password is a long random words password as explained by xkcd!
Isn’t that a circular feedback that leads nowhere? Developer like to be developers but being one doesn’t mean to make solutions and profits. Like a bureaucrat likes bureaucracy and then everything is bureaucracy under the hood sprayed with marketing sauce. Best stories of best products sound “we hacked, broke, short-cutted, ignored, made a fucking lots of money, and then rewrote fundamental instruments to match our needs”. Isn’t there a controversy with a nice cool environment that developers praise?