skysight-inc/HackerNews huggingface dataset:
Back in 2014 when I started 20k was an impressive number.

To give an example: the Sony Xperia Z2 tablet appeared to be decent, because it had the - back then - state of the art Snapdragon 801 SoC.

I think I got less than 10k bunnies on it - no idea why(no power saving mode or anything), but it was a deal breaker for me.
I hate to say amongst the commenters I don’t think your opinion is a popular one here. I agree with you.
I imagine in the end not much old code was left, but if his initial code was well structured I can also see how it helps to not start from a blank slate. The structure you see in the names of files, classes etc. can make it easier to keep a mental model of the app that you’re building.
I think the history of link aggregators shows that "if it makes it to the front page it belongs here" is a race to the bottom. If one follows that guideline, content inevitably shifts to "easier" entertainment, and away from difficult, less entertaining content.
As a point of comparison, you can also expose Puppet masters to the public Internet but Puppet is using HTTP/HTTPS as a transport, so it is trivial to put a reverse proxy in front of it, requiring a valid certificate (managed and signed by Puppet) to contact the service. This way, no need to maintain a whitelist of legitimate clients.
I've seen mentioned in the comments various "deployment" tools (or call them "configuration management" if you will) being called "insecure" or "immature", or one being claimed better than another; however I think this is a good opportunity to talk about a deeper problem, namely the architectural choices each tool has taken.

These choices all impact the reliability and security of the resulting system, especially the following:

* do they rely on SSH, or they have implemented their own authentication / authorization techniques? (personally I would be very reluctant to trust anything that just listens on a network port for deployment commands, and it's not SSH;)

* do the agents run with full `root` privileges, or is there a builtin mechanism that allows the agent to act only in a limited capacity, within the confines of a set of whitelisted actions? (perhaps even requiring a secondary authentication mechanism for certain "sensitive" actions, for example something integrated with `sudo`, that provides a sort of 2-factor-authentication with a human in the loop;)

* do the operators have enough "visibility" into what is happening during the deployments? (more specifically, are the deployment scripts easily auditable or are they a spaghetti of dependencies? are the concrete actions to be taken clearly described, or are they hidden in the source code of the tool?)

* are there builtin mechanisms to "verify" the results of the deployments?

* and building upon the previous item, are there mechanisms to continuously "verify" if the deployment hasn't changed behind the scenes?

I understand that some of these features wouldn't have helped directly to prevent this particular case, however it would have helped in alerting and diagnosis.
I wonder why the significand is represented as a > 1 number. It complicates representing zero (making it a special case not covered by the article of defining exponent=0, mantissa=0 to mean zero). Is it for the purpose of simplifying arithmetic operations or is it to minimize the number of redundant representations of zero?
That depends very much on the particular Wikipedia article. I wrote about this recently: https://news.ycombinator.com/item?id=22990237

HN used to have a software penalty on wikipedia.org submissions and I was persuaded to remove it. For the time being.
Juul sells several nicotine levels. Most people that I know who used it to quit just weened themselves off.
Jekyll is kind of slow :(
Can’t be certain that no one has copied the unencrypted user’s data either.
I wonder if it is the same person who has worked on the implementation of e.g. Win32 "BUTTON", MFC's CButton, Windows.UI.Xaml.Controls.Button, System.Windows.Forms.Button, System.Windows.Controls.Button... :)
Show HN: I trained a recurrent neural network in JavaScript to draw dick doodles
We're in an awkward transition period where hardware raytracing is now available but not very useful for most people as the hardware is still niche and getting the most incredible results from it doesn't run at 60+ fps. But, if we ever want games/VR/AR/etc. to match the photorealism of modern visual effects, full-blown raytracing / path tracing will be required. It's going to take a while but it will eventually happen. The results will look far different than the before/after screenshots in the Turing paper.

Also, once the hardware is more ubiquitous (e.g. in consoles), some of the features provided by raytracing will make the game development process much simpler even if the results are only marginally better for some of the presented hybrid use cases.
Show HN: Logalert.py – Pipe command output (such as logs) to email for alerting
> So not only are you unnecessarily adding to your tools, but also unnecessarily adding to your build steps, which costs time every time you make any sort of visual change.

Most frameworks nowadays ship with Sass/Less built-in, or at the very least make it trivial to bolt it on. Further, most frameworks nowadays fully support the ability to automatically rebuild stylesheets when regenerating the HTML, in which case it's quite literally: change CSS, reload, change CSS, reload, etc. The build times are negligible (especially if I'm using Erlang/Elixir or C# or something else that needs compilation on changes anyway).

Also, since I'm in the habit of keeping the HTML I write or generate concerned solely with describing the content rather than the appearance thereof, there's rarely (if ever) a separate "change HTML" step there; the HTML (or the templates to generate it) is already written alongside the content, and it's just a matter of adding enough CSS to make it look decent.

Importantly, since the HTML makes no assumptions about its appearance, it's straightforward to define different stylesheets for different contexts (whether interactive v. print, or reusing a given page on multiple sites/applications with very different styles, or what have you).
This is a bug because the downside of this behaviour is outweighed by some tiny upside.

But I've never seen a person editing a bash script without an editor that swaps in a new version of the file until today, so never knowingly encountered this bug before.

It should be fixed.
Browser Demo: https://dickrnn.github.io/
Because it carries the "Pro" label. Why not just call it Macbook then? Why release what is essentially 2 products under one label, confusing consumers. It's predatory because Apple charges way too much for way too little when it comes to the Intel Gen8 models of the 2020 MBP.
If you wrap your own coils and you don't throw it on your ohm meter before throwing it on your battery mod, idk what to tell you. Even if you've done it 100 times it takes 1 second to make sure you have good contact between your wraps like you expect. I used to do this dude.
That's besides the point.

Let's look at Germany from that EUROMOMO map. Despite all the measures, they have had over 150k cases and over 6k deaths (a death rate of over 2%), but it doesn't show up on the graph.

All the deaths that have happened in Germany in the past weeks could've happened months earlier and it wouldn't have shown up either.

This disproves the idea that there couldn't have been any mass infections earlier, because we would've seen that from excess deaths. That's the point I am making. The only way to know would've been through testing, but there wasn't any testing then.
Why do you consider that unreasonable, when the free-market option is bankruptcy? They got to keep 5%, rather than 0!

The terms of the emergency loan was a certain debt:equity ratio, so in order to qualify, their very high debt load had to be reduced.

This could be accomplished in any way the company desired, and it turned out that the only viable pathway was to allow bondholders to convert their loans to new shares at a favorable price. This led to a 95% dilution for existing shareholders.

If they hadn’t done this, proper bankruptcy would have been the next step.
It's worth noting that those companies have trillion dollar stock valuation, but by far less actual revenue. Average revenue per year of these companies is "just" 159 billions. Amazon has had a revenue of 88 billion.

German companies with more revenue than Amazon: Volkswagen, Daimler, BMW, Allianz, Siemens, Deutsche Telekom, Uniper, Bosch.

On the smaller end, Germany also has a comparable number of employer firms per capita as the U.S.

Empirically it largely is a myth that worker protection and consumer protection stiffles enterprises or innovation.
> Every Python script can be edited while it's running with no effect.

Until your script throws an exception, at which point your backtrace will not match the code that was running at all.
>Are there numbers about large amounts of sideloaded extensions causing the reputation of firefox for android to drop?

I'm not aware of any, but that could be because alternative browsers are not that popular on mobile in general.

The reputation of Android itself has definitely suffered due to sub-par apps (battery draining, slowdowns etc.) and downright malware (sometimes promoted via Google's own ad network).

>And even your earlier example was concerned with malicious extensions in Mozillas own extension store.

It seems they disabled sideloading on their desktop browser some time ago, so that was the only way it could've happened anyway.

https://blog.mozilla.org/addons/2019/10/31/firefox-to-discon...
https://blog.mozilla.org/addons/2020/03/10/support-for-exten...

I don't know whether they currently do any review for extensions in the store (even automated one), or just manually ban bad actors.

(There is an additional reason to disable sideloading on desktop that I mentioned in a previous comment - other destkop apps installing shit without user action/approval, which cannot happen on mobile due to app isolation).

>I don't see how trusting users to recompile an unrestricted firefox fork goes well together with not trusting users to sideload a browser extension.

- Their name wouldn't be on it. To publish in Play Store, a fork would have to scrub all Firefox branding from the app (see Iceweasel), and would then assume all responsibility.

- Let's be honest, in practice, such a fork would be mostly used by highly technical users who are more likely to know what they're doing. Non-technical users would be far less likely to install it than some random 3rd party extension they come across. The Firefox name is fairly well known outside of tech circles. The name of some random fork would not be.

>In the future this might very well interfere with peoples ability to avoid censorship.

I agree that there is a risk that their official binary distribution could gain exclusive abilities in the future which are not part of the open source version (at which point Firefox would technically no longer be open source, e.g. Chrome vs. Chromium). Care should be taken that that doesn't happen.

Anyway, at the moment I'm far less concerned about extensions that they specifically want to ban/censor, and far more about 3rd party developers potentially losing the ability to innovate, if the review process is only practically available to popular established players (who got popular while the ecosystem was still open) - because then how would a new project even get to that phase? That may or may not be an issue though, we'll see how it turns out.
Why Invest in Technology During a Recession?
Depending on your target industry, "a factory" can be as simple as some old yet reliable drill presses and lathes, and then hiring a machinist or two. How is the flexibility to do this "controversial"?

https://youtu.be/xXze8_SzW28?t=431 <---Granted he's got Youtuber money and other gun-sales related money to help, but the concept is the same....he's bootstrapping a factory after purchasing the relevant capital infrastructure using his own money.
If you ever used Win32, you wouldn't mind abandoning it. It is not good API. If you know WPF, you feel like at home with UWP.
The only thing I didn't like was Microsoft adding an annoying banner asking me to install some Points extension :(

Not cool putting adverts on your Github pages like that
I'm really rooting for WebGPU as the "cross-platform 3D-API for the rest of us" (where "rest of us" is everybody who isn't a highly specialized rendering engineer in an AAA-game engine team).

There's "one small thing" I'd like to see in WebGPU for the native use case: an optional compile-time configuration feature which allows to pass in "backend-native" shaders so that all the runtime-shader-translation code isn't necessary.

Example size for compiling "Hello Triangle" on macOS before and after stripping, both using the Metal backend:

- with sokol-gfx: 95 KB, 91 KB

- with Google Dawn: 5.2 MB, 4.0 MB

I bet that most of that 4 MB overhead is coming from the integrated shader validation and translation code. I haven't tested with wgpu-native, but I guess the size overhead will be similar.

Since native applications don't need the strict shader validation of the web platform, this probably would also speed up pipeline creation a bit :)

PS: clarification, the executable size for Dawn is also using sokol-gfx but using its new WebGPU backend and statically linked against Dawn (which in turn is using its own Metal backend), so not a 'Hello Triangle' built directly on top of the webgpu.h API. The size difference should be negligible though (at most a few Kbytes more).
At the end there is always a human. But those images were selected by robots, no human was involved. It was the robot's 'decision'. At least that is my point of view.
Haven't thought about MFC in many years. Your comment reminded me of a time in the 90's when I was learning how to build UIs using Win32 calls and then I learned about MFC and I thought it was the greatest thing ever.
The problem on Windows is getting and/or renewing your authenticode certificate. Dealing with the certificate authority is like spending time in a Gerorge Orwell novel.
Museum of Fezology
This is my gut feeling too. Every time one of these awful minimal flat interfaces pops up I know I'm going to spend ages trying to find where they've hidden all the functionality just to keep the UI 'clean'.
How to Give Your Team a Sense of Purpose
I can reproduce this in Emacs 28 and non 4.9.2 I have no idea how nano handles saving files but emacs seems to handle it safely as described and still hit the dangerous case.

from the depths of basic-save-buffer-2

;; Write temp name, then rename it.
;; This requires write access to the containing dir,
;; which is why we don't try it if we don't have that access.
I have noticed a huge increase in the number of comments on stories, though I felt like that started slightly before the pandemic. Does HN provide traffic stats anywhere public? I'd be curious to see when it changed, or if I'm merely imagining it.
Using rename() does this for you. It's actually guaranteed to preserve the contents of the old file for any process still having it open while atomically letting any future process only see the new file.
What a lame article. I don't find any utility in any of the principles expressed here. Also, in my experience (at AWS 2008-2014, before/after in the same industry), I can't recall instances of companies that either mentioned, or followed, these principles.

Specific critiques:

> #1 Build as if you may sell at any time

> ... it forces you to build with best practices and isolation.

The opposite. It gives you an incentive to postpone technical debt, you want to grow and be acquired at the expense of whoever is going to integrate your startup into $bigco later.

Side note: "AWS Organizations" to me is simply a way for AWS to try to cover for the poor design choices of the organizational structure of an AWS account, and the unnecessary complications related to billing and metering.

Try to understand the AWS bill of a sufficiently large company - you won't. The AWS rep won't. The AWS Solutions Architect won't.

Also, never heard of a company being acquired at a higher price because they had a "proper" AWS setup.

Ah, forgot this: if your acquirer is using MS Azure, good luck telling them that you are using Cloud9 or other AWS-specific stuff.

Let's continue...

> #2 Build as if you may open-source at any time

Yes. In an ideal world. In practice, almost nobody follows best practices. Because there's always some urgency that takes precedence. This is why companies like Accenture, PwC, Deloitte, etc, keep billing monstrous amount of money to help large companies "migrate" or "evolve" or "adapt" or whatever buzzword they use.

> #3 Build with a cloud-native mindset

> ... going outside of the platform should be an exception and something you do only when truly needed

> My thinking on serverless these days in order of consideration.
> - If the platform has it, use it
> - If the market has it, buy it

Serverless, really? A promising, cutting-edge technology, sure. You want to bet your startup on Lambda? Go ahead. Lambda has been around for ~6 years now (I even tried a super early version internally before it was released), and I still haven't seen a large company doing A LOT of development on Lambda. Most project using Lambda are small, confined, isolated projects and/or teams.

Cloud native is great, WHEN it makes sense. I don't like religion too much, and I don't like religious people either; the author seem to have taken his faith in AWS too seriously.
One should really consider DevSecOps when dealing with a large infrastructure involving dozens or hundreds of micro services. Security as Code by design should be implemented as soon as possible. In my current gig - the following 3 points are key:

- 24x7 Proactive Security Monitoring

- Shared Threat Intelligence

- Compliance Operations

I would really advise anyone interested in this subject to check out DevSecOps manifesto [1].

Also - if you are running a k8s cluster for all your micro-services, there are several guides online as to best practices (see [2] for example).

----------

[1] https://www.devsecops.org/

[2] https://dev.to/petermbenjamin/kubernetes-security-best-pract...
Same here (Samsung Note 8)
Somehow I think Buffett would have ended up a parasite in any society. There's always been a niche for the Buffett type.
If social distancing is deemed a public health necessity then it should be made compulsory on flights. It makes no sense to let people decide what they prefer.

But it should be obvious that if planes lose one third of their seats then the cost of flying will increase in proportion, and perhaps more because of the state of the market.
They are basically OEM ( at least it was in 2018 / 2019 ) from Panasonic. But not all Eneloop and in fact LADDA are from Japan. Panasonic do make Eneloop from China and they are of slightly lower quality than the one produced in Japan.

I believe there are a few variant / types / size of LADDA, and there are one or two make in Japan.

Unless you are perfectionist you would want the best one from Japan. Otherwise most LADDA are good enough for 99% of its intended usage.
Amazon 2019 revenue is $280B, which is greater than every company you listed and tied with Volkswagen.

Valuation reflects market sentiment and potential but perhaps I should have left it out. The real focus is the "world-changing" aspect of the products produced.

What have been the recent global innovations produced by those German companies? Anything turned into a household name?
Then you have a kid and realize just how much free time you actually had...
Very much in line with my experience, but in fact for me it wasn't even 'being quite good at,' but just sufficiently managing and exceeding minimum expectations. In my college years that was, for example, studying, working, and managing the faculty magazine. I had no time to give to friends or socialise even. Relationships are definitely taking up one of these 'slots,' so to say.
Not sure of an API, but rumors point to a new ARM chip with EL2, although it’s probably destined for Macs.
And yet they still haven't added the feature to globally zoom, instead of per website. This is the only thing that keeps me using chrome
> It sucks that this cannot be available on iOS because of Apple’s restrictions.

Apple users have exactly what they want. It doesn't "suck": it's the very definition of walled garden. Your device is not yours, you are just allowed to play in there, under adult supervision. If you do not want walled gardens, just stop paying for them.
you can work hard at a hobby, or fitness, or many other areas that aren't commercial.
In tools like Node-Red (https://nodered.org/), although they have their own implementation.

Any visual coding scenario really.
Unfortunately those same people also push others (or worse, their direct reports) to burn out as fast or faster than themselves.
Hi guys, I'm a Remote Frontend Developer focused to ship complex UI projects, with strong frontend coding skills and deep knowledge of the frontend ecosystem tools and technologies. I already worked as a Software Engineer, so, I learned a lot about code best practices, architecture, and concepts.

Location: Brazil
Remote: Yes
Willing to relocate: Yes
Technologies: Javascript, React, CSS, Typescript,
GraphQL, Apollo, Node, Webpack, and others.
Résumé/CV: https://linkedin.com/in/iamgbayer/?locale=en_US
Email: iamgbayer@gmail.com
Hi Peter,

You're an awesome HN user. Don't sweat it for one second. Thanks!

If you simply put "> " in front of what you're quoting, it signifies the same thing. Or you can put it in double quotes, or put asterisks around it and it will get italicized.
Personally I've always disliked settings panels that apply the moment you click a control. I like being able to hit OK, or better yet, click Apply and see the button then get greyed out as a little visual confirmation that the settings have applied.
You don't need to own a headset to watch a stream so that's not entirely surprising.

The level of interest is encouraging because hopefully some of that will translate into hardware ownership.
Even when allowing incremental reading of the script, it would be safer to use inotify to detect changes to the script being executed and fail when changes are detected.

Also, flock() could be used to signal to other processes that the script file is not to be written to.
This glosses over the far more important question: Is Margarine the New Sunscreen?
FYI, Phaser 3 doesn't use Pixi as backend.
That fact may cause sites like archive.org to pass over some of the content. Ergo we need to make a P2P mirror of the content. A ZeroNet port seems about right for a site with hundreds of pages and close to 58K textfiles.
You are being equidistant. You can't compare the suffering of a pig or a cow with the suffering of a lettuce.

Considering we have to eat, we should try to minimize the suffering.
US Government places new $200M order for Smallpox Vaccine (2020)
Web and client-side WebAPI has security first in mind. The conception of WASM and WebGPU is pushing Web into wider audiences and influence, taking up what used to be OS' market.

On the OS side, Google the capability-based OS Fuchsia. Someone in Google understands that user's consent over their computation resource (file/directory, network) is more important than ever.

And then there's WASI where it will enable OS to directly host WASM while allowing controllable gates over computation resources. WASI might be an important endeavor in the future and I think WebGPU design should have WASI in mind.

Those may have conflicts of space and market in the future, but all are moving into the same interest, the balance of user's consent over resources, security, and performance. It seems these standards are in good hands.