skysight-inc/HackerNews huggingface dataset:
> even if it's unethical

it wouldn't even be unethical. responsible disclosure starts with engaging with company at eye-level. all that these bug bounty platforms do is take away exactly this power and allow the company to consolidate the contract to a single entity (e.g. preferred supplier). they deserve even less respect than any shady recruiter or typical outsourcing sweat-shop.

giving these people power is like talking to a cop without a lawyer - regardless of what they say, they don't have your interest in mind and you have lost before the game has even started.
> 1.

Start with one per environment. As it grows, you can identify the reusable patterns and move those to their own state files and import them wholesale with terraform_remote_state. It's code, treat it like code.

> 2.

A module for shared resources, a module for resources that use them. You don't bloat anything if you just namespace it and then pass the shared resources' output as an entire object to a parameter in the resources that share them.

> 3.

Same answer. You can create objects for your outputs where you can easily namespace things.

> 4.

This is true. But there's no better way for obvious reasons. It's a high level abstraction, the only alternative is to use low level abstractions, at which point you're just doing shell scripts. Which, by the way, Terraform has pretty clever ways to integrate. It's not pretty, but it's isolated ugliness much like unsafe Rust/C# where you really need to instead of having to go full ugly.

Also, you can always submit pull requests to Terraform providers. Doesn't guarantee the maintainers will be active enough to respond and upstream it, but it will solve the issue cleanly for you and other people at least in the meantime.
No details on what those employees actually did? Lacking that, this is just clickbait.
It is effective immediately. There is a full FAQ here: https://help.github.com/en/github/getting-started-with-githu... Essentially, "Pro" = Team - the only difference is whether it is an individual account or an organizational account. We'll work to clarify this on the site.

No, there has not been any change to the data pack pricing for LFS data.

Glad this will help you continue building on GitHub!
which of the dead comments should have stayed in your opinion?
Sorry for everyone who couldn't open this, I tuned some apache settings and the site should load much faster now!
Hunh, that’s strange. Works fine on my iPhone. What are you running?
macOS has always supported case-sensitive filesystems, but the default has always been case-preserving, but not sensitive.
A few years ago they added case-sensitivity as a format option for HFS+, but it was still off by default.
What was the process for extracting the file?
I've never heard the expression before. Could someone explain its meaning please?
It’ll be seen as a liability for new companies, but most existing companies have decades long leases they’ll be loathe to risk ditching. A return to status quo is a very strong factor in large organizations, after all.

I think this’ll be less of a watershed moment for most industries.
What's wrong with HTTP/2 multiplexing?
12+ years PHP and simple JavaScript programmer here. I loved programming and building websites.

Then I got into modern JavaScript with Reactjs, Nodejs, TypeScript, and other mess. Initially, I was excited because that's what everyone was and still is talking about and I love learning new things.

But it is too ugly in JavaScript land. People make fun of PHP but with PSR standards it is easy to enforce coding standards. In JavaScript land, everyone has their own standards, no easy way to enforce them, but most people don't follow their own standards. It is ugly spaghetti code mostly. Debugging tool is browser which makes it nearly impossible to troubleshoot when you are dealing with tons of minimized libraries. And even when you are dealing with simplest tasks JS developers start looking for libraries instead of just writing 5 line function.

I was ready to leave programming for management or other jobs but changed my mind and learning embedded systems, game dev, and some other cool techs. Hoping to transition to robotics or something else soon.
Account created in 2014 with 33.5k karma...hardly seems like a throwaway account.
Bradfield Computer Science Intensive
Hi, any reason to still have a restriction on number of free bot accounts one may have (currently one)? There are limitations in products built on GitHub that require you to create multiple accounts if you don't want to share tokens between repositories (bad idea security wise): https://github.com/rust-lang/crates.io/issues/849#issuecomme...
Thank in large part to GitLab for pushing the market forward on affordable collaborative development.

We moved across when GH did their pricing changed. Free CI/CD well before "actions". Never looked back.
I use Pocket Casts specifically for the synchronization between my phone and the web interface.
Do you propose adopting the shavian alphabet or just modifying spelling with the latin alphabet?
Delivering Instant Self-Service Analytics with Tableau on Big Data
Yeah, but in Czech it's "č".
No but the manual method with Ctrl-W still works. Multiple consecutive Ctrl-W operations add to the clipboard; you can gobble the whole thing with several Ctrl-W and regurgitate two copies with Ctrl-Y Ctrl-Y.

If you like spaces in filenames, you should use a GUI, anyway.

I recommend Windows Explorer; it's widely available.
Works great on my iPhone 6S, even, here.
I posted some thoughts on this in my Show HN thread
https://news.ycombinator.com/item?id=22844481

I'll quote it here

> My long term thoughts on aggregators for fediverses:

I think aggregation/curation sites (like pixelfed.club) can be a decentralized complement to the fediverse. The fediverse generates the content. Aggregators, can curate the content for specific topics and help new users discover content. Anyone can start a fediverse instance, and anyone can start a aggregation/curation instance.
Gave me a smile and a quiet chuckle, thanks for this little bit of fun OP.
Ooh, it looks like the black MacBook from 2007! Definitely my favorite Apple laptop I've ever used. Less plasticky feeling than the iBook it replaced, more comfortable to use than the metal unibody machines that replaced it.

I had the plain old white version and stuck a bunch of blackbook replacement parts on it to make it look kind of like an oreo.
Ctrl-W Ctrl-W Ctrl-Y Ctrl-Y will work.
Are you sure? That will result in a conversion every time a string is passed to the kernel.

Windows can handle utf-8 but it is not the native character set for the platform.
This is incredible! Where did you come up with the idea for this?

With the way things have been going lately, I’d pay for this service.
* Except Russia

You can insult, malign, and attack Russia all you want because "it's all Russia's fault!"
It should also be noted that conspiracy theory != false. There are numerous examples of real conspiracies throughout history.
CoreCLR actively discussing introducing Utf8String type.
https://github.com/dotnet/corefxlab/issues/2350
Additional context/reporting here:

https://www.washingtonpost.com/technology/2020/04/13/amazon-...
It is never racist to not eat in a district labelled a certain way. Thinking that way makes you part of the problem.

What if people avoided little Italy? Or little Canada. Racist?
There's only one thing to understand about SMBs: They're woefully inefficient. Efficiency comes with scale (which is enabled by automation). This is what turns previously artisan projects (e.g. clothes) into mass-produced items that can be sold cheaply and help improve living standards. SMBs run counter to this: Most of them don't want to grow and most are poorly run. (The ones that are well-run and are founded on interesting concepts have a habit of growing out of the SMB category.) What's left is your local drycleaner, restaurant, independent greengrocer; a lot of them industries that automation hasn't been able to help scale. Yet.
Given the above, it is worth pointing out that the compilers are also much much better in verification and useful warnings/errors. Back in the (very old) days, there was a motivation to cut down PCC (Portable C Compiler) and give the birth to Lint as a separate application (because cutting the compilation time was a greater priority). The current trends are completely the opposite: compilers are getting increasingly more powerful built-in static analyzers and sanitizers by default.

I think the lack of powerful tools in 1990s-2000s contributed to the thought by some that C is 'diffcult' in terms of safety. However, things have moved on.
Counter point: Craigslist also has very simplistic, human-centered design that they get praised for and they are not rich at all.
You literally are illustrating my point. He clearly doesn't. Motives unknown. Could be a personality disorder.

In any case, rational people ought to just get over it.
I have a widescreen monitor hooked up to laptop that is on a stand so the screen has the correct height. All resting on a desk that can be raised so I can stand part of the day. Logitech wireless keyboard and mouse, and Bose QC35s for meetings.
> The principals of supply and demand and huge host of other issues are just fine and work great.

The principals of supply and demand are vague and flexible enough to be completely devoid of meaning.
So much this. Is the Switch really that insecure that there are ROMs floating around of this already? o.o
> I don't know if the original Hindu system read from most significant left digit first

The Sanskrit language (exemplifying the "Hindu system") had the same pattern as English for the teens, i.e:

11: ekadaśa = eka (1) + daśa (10)

12: dvadaśa = dva (2) + daśa (10)

13: tridaśa = tri (3) + daśa (10)

etc ..

In Sanskrit this pattern (least significant non-zero digit spoken first) continues through to larger numbers.
so:

20: vimśati

21: ekavimśati

120: vimśati-śatam

1121: ekavimśati-śatam-sahasra

etc.

But it's important to remember that the spoken rendering of numbers in all these languages precedes the written representation by millenia. People have been counting much longer than they have been writing. Of course later ways of speaking the numbers may have been influenced by writing systems, but the spoken rendering of basic smaller numbers tend to be relatively stable over time.
The general tone of the comments here seems to be 'Stephen Wolfram is a pompous ass, so we shouldn't listen to anything he has to say'. After reading through the post I think that, yes, he probably is a pompous ass (you could certainly have trimmed out the paragraphs that sound like a self-congratulatory auto-biography without losing much), but I really hope people don't just ignore this because of that. There are some legitimately interesting things going on here, and I hope other, more traditional, rigorous, and less hype-prone scientific minds are willing to dive into it to see where it leads. If it'll actually be a unification of relativity and quantum mechanics, who knows, but there's definitely _something_ here, and I'd hate for it to just get ignored because of distaste for the man. There are some actual scientific predictions here - e.g. that there is a maximum speed at which quantum entanglements can happen, analogous to the speed of light in relativity - which I hope people start thinking about ways of designing experiments for/falsifying.
How to Test Any Application Effectively with PyTest
What if sometimes reinventing the wheel is in fact the efficient procedure and "humility" has nothing to do with it? Simultaneous discoveries and rediscoveries are something rather common. Rather than getting familiarized with some literature and, consequently, getting also tangled with the problems peculiar to how the literature has developed, maybe a fresh start from a different approach is sometimes preferable.

What specific literature are you referring to?
Sounds like Microsoft is creating a new branch attempting to replicate the Atlassian business model. First get developers hooked on GitHub, then build GitHub integrations into enterprise software, then let developers make the sale to their own employers (primarily because developers like the little green activity boxes).
No, that can't be it. Ventilators is a last resort kind of measure, most people under ventilators die either way, so they can't affect numbers much. I suspect Germany is just testing more and earlier than others.
It's not clear to me whether this is possible under any configuration, but: can you enforce a two-person rule? I'd like all users to be able to merge accepted PRs, but no one should be able to push directly to master (unless an admin specifically elevates permissions to do that).

The only way I can think of is to have a bot be the only one with commit access, and to interact with the bot to do merging. But that seems pretty roundabout.
1.) The issue I was pointing out at was that one of ideas has to pass much different standard then the other. You are looking at differences only in one place, not at the other.

B being faulty does not imply A being correct. B having small problem does not imply A does not have even bigger problem.

2.) What I mean is that people conclude that you play politics with rules. You don't put your ideas under the same rigorous test. That is where disengagement typically starts.

Then it makes sense to go either your way or my way, but depending on politics of the situation (who is going to be responsible, who is stronger politically). How I think your idea would be had it gone through the same test should be factor, but if that part runs without you. It does not make sense to play one sided questioning game for the person you are negotiating with.

Your idea can make the project fail too and from the point of view of the other person, was not really tested. And then if you are accountable I drop my idea and let you do your thing. If I am accountable, you did not done nothing to covince me you are right.

Through it is also unlikely that the project would fail of a single reason. So I don't think the documentation would be much of the threat. We write minutes from non conflict non hostile meetings all the time, so it does not sound like much would be changed. Not that it would be used the way you suggest often. Unless other person works in some kind of toxic company, they are fine explaining their reasoning to manager. It is quite likely they discussed your questions even before they decided to disengage.
False equivalence. Credit scores measure failure to honor financial contracts. They’re not about honoring arbitrary social norms
I wasn't aware of this, looks like it would solve some of our pain points, thanks!

I think the existence of tools like this is a succinct way to say that static/declarative languages are really hard to execute.
> If toilet paper was $20/roll, people would think twice before hoarding,

The rational response to $20/roll is to buy as much as possible. It will be worth $40 soon.
Articles That Will Make You a Better Programmer
Hi Nat, with Microsoft now owning Github, I'm really curious to know what the future holds for both Azure DevOps and Github?

I'm a user of both - Github for OSS, and Azure DevOps for private work. IMO, these areas are where they are best suited - pipelines in particular are really powerful in Azure DevOps, and user/permission management, AAD integration and integration with build agents are all excellent.

I really like Azure DevOps, but all this has me worried about it's future - do you know if it's going to continue to exist and be developed in tandem with Github?
Is there any reason to keep the undefined behavior for shifts of negative numbers, instead of making it implementation defined? Most compilers (for twos-complement architectures at least) are not using that latitude, and I would also guess that most programs that are written for twos-complement arithmetic likewise not expecting undefined behavior for non-overflowing left shifts of negative numbers. Thanks!
> Luck favors the prepared mind,

Then the US should be much better off, because they have about ten times more ventilators than Germany has. But only four times the population.

But, the US was unlucky to have 50% of cases in only one city. So they ran out of ventilators in that one place, while having a surplus elsewhere.

They reacted quickly and correctly by sending hospital ships (much quicker than trying to put ICU beds on trucks).

Of course, compared to the EU, the US is still handling the situation way better.
if it's supposed to be laid out like a newspaper shouldn't it use column-count etc. https://www.smashingmagazine.com/2019/01/css-multiple-column...

It seemed like everything was flex? maybe I'm wrong, and I missed it somewhere?
DeflAition
Just a heads up, OpenDNS blocks your domain for "Web Spam". You might want to poke around and make sure you don't have unprotected comment forms or open redirects.

https://domain.opendns.com/bert.org
Speaking as someone who worked at Netscape during the 90s, your comparison is missing on a lot of fronts.

First, Microsoft was evil back then because they didn't just rely on excellent pricing and features (both of which they had) - but also because they leveraged their monopoly in one market (desktop operating systems) to prevent competition in adjacent markets (browsers).

I think it's difficult for people to believe that Microsoft has evolved, and grown more responsible (Hell, I can run linux directly with windows - with kernels available on the Microsoft store) - but you need to follow the evidence.

Also, leadership: Satya Nadella != Steve Ballmer.
AWS has that.
I'm not sure about Germany, but at least in Italy ICUs were at 80% capacity when the outbreak hit.
>For a simple MITM exploit that can be fixed by replacing "http://" with "https://", this is simply unacceptable.

I think the author is really not understanding the complexity of updating to an https:// url inside of a mobile applicaiton. Valve is most likely using a self signed cert so that would require bundling the certification in with the app so that Apple/Android allowed it to load inside of a webview. This is not nearly as simple as just updating all of the urls in the app to https:// and the fix could very well take a few months. Furthermore, loading the store page is not necessarily a vulnerability to valve as if you are able to re-direct it, you wouldn't have access to any of the Steam user specifics, (like account data). It wouldn't be much different than putting a shady link somewhere on the internet, and people navigating to it.
The Problem with Google and Apple's Covid-Tracking Plan
Hey, captain nemo! The major feature which we're looking for is Github Pages for private repos, coupled with Github actions.

We have multiple client sites (completely static) we're hosting on $5 Droplets (+GST+Backups).

We plan to deploy more such sites and keeping them on Gh-pages (auto build using GH-Actions) would reduce a lot of headaches for us.

Right now we've had all private repos scattered over everyones individual accounts and managing this has been a pain. So it would be nice if there is a single place to keep it all (thanks to free private repos for teams, we'll be migrating all of it to one place soon enough).

With 3 team members, $12/month for all the extra goodies seems reasonable.

We initially used BitBucket but switched to GitHub as we prefer it's UI/UX/Familiarity + a single place to manage both work/open source issues/prs etc is definitely easier.

Oh and gotta need that repo/contributor insight to compete with team mates :P
If you have to ask this, then just don’t
I don't see what's "human" or not about the different rate of return of different languages. If it tickles your fancy, go for it. But language is a tool, one that is almost useless if you have no one to use it with. So I have a tool which I basically can't use anymore.

I'm not blaming my elders or anything, I'm sure they were most well intentioned and they don't know the future, but I think my time could have been better spent. And I know there's many things I've wasted my time on, but I am simply stating my belief the future utility of some languages is not worth the cost of keeping them alive.
I leaned towards Doomer, especially early on, but must admit that looked at on the scale of years, it's possible that this will turn out to be a blip followed by a new normal of (say) a three-percent higher rate.

One caveat is that over the long run, everyone dies exactly once. A more interesting stat will be life-expectancy (i.e., presumed years lost). But then again, most people dying aren't losing that many years of their life expectancy. (Apologies for being grim.)
This is very cool. I was wondering the other day if my CPAP machine (same model) would be capable of doubling as a ventilator and I'm surprised that someone has already thought of this and provided a solution.
I hope for your sake that's not the majority of your work! Personally I've found that if I have to reference a contract to make a point, it's almost always a red flag-level event for that relationship.
It’s interesting to think what Nixon could’ve been if he wasn’t so paranoid and vindictive. Arguably the shenanigans in Watergate weren’t even necessary to secure a victory.
isn't that the point the author is making? they're suggesting that a website that most average internet folks would say is terrible/ugly/bad/etc is actually nearly perfect when looking through the lens of "who does this website serve".

it feels a bit naive to shrug this off as "elite wealthy people getting their ego boosted". where are the articles praising Jeff Bezos' "expeditions" website[0], or Bill Gates' personal blog[1]?

[0] https://www.bezosexpeditions.com/

[1] https://www.gatesnotes.com/
If you know that you don't know something, then you're already one step ahead of the game, because many programmers dive in thinking that they do understand something and don't find out until it's too late that they never did.

Deciphering large codebases takes a LONG time. Months often, to get up to speed. One thing that has always helped me is to take notes. Especially if you start getting lost in a deep set of function calls. Write all that down. Form hypotheses on what parts of the code are doing and try to come up with ways to test those hypotheses.

Soon it will start to become less murky. It just takes a lot of time and perseverence, even for veterans.
> There's not really a good reason to support UTF-8 over UTF-16

Two big reasons:

1. All legal ASCII text is UTF-8. That means upgrading ASCII to UTF-8 to support i18n doesn't require you to convert all your files that were in ASCII.

2. UTF-16 gives people the mistaken impression that characters are fixed-width instead of variable-width, and this causes things to break horribly on non-BMP data. I've seen amusing examples of this.

> Write your programs/whatevers allowing your users to be aware of and configure encodings.

Internally, your program should be using UTF-8 (or UTF-16 if you have to for legacy reasons), and you should convert from non-Unicode charsets as soon as possible. But if you're emitting stuff... you should try hard to make sure that UTF-8 is the only output charset you have to support. Letting people select non-UTF-8 charsets for output adds lots of complication (now you have to have error paths for characters that can't be emitted), and you need to have strong justification for why your code needs that complication.
A stack processor will always be less efficient than a two or three operand register-based processor. This is because all of the the registers can be used directly without any stack manipulations to access them, and the two or three operand operations usually include a move.

If you examine any stack language code, you should consider any stack manipulation to be a NOP type of inefficiency. And when a virtual stack machine is implemented on non-stack hardware, these inefficiencies are compounded.