skysight-inc/HackerNews huggingface dataset:
The dependency management is highly questionable for me. Apart from the security concerns raised by others, I have huge concerns about availability.

In it's current form, I'd never run Deno on production, because dependencies have to be loaded remotely. I understand they are fetched once and cached, but that will not help me if I'm spinning up additional servers on demand. What if the website of one of the packages I depend on goes down, just as I have a huge spike in traffic?

Say what you want about Node's dependency management, but atleast I'm guaranteed reproducible builds, and the only SPOF is the NPM repositories, which I can easily get around by using one of the proxies.
The good thing about this is you can effectively build a register service that serves the same level of trust that npm provides, because at the end of the day that is the only deferential in this scenario as npm can just as well return malicious code.
Isn't your example exactly how Rust works to?
Maybe we'll go back to the days of cartridges. Imagine getting a 1TB SSD that you push into your PS5
> The president must be at least planning on obstructing the bill, since the only reason they'd need 60 votes would be to overcome a veto.

The veto override requires a 2/3 majority. The 60-vote threshold is required to end a filibuster.
And the restaurant pays 30% as well. Charging on both ends.
I think people are missing my point.

Sure you can't publish an app that does this, but unless I'm mistaken, you can access any API you want in your own dev setup, or on a jailbroken phone.

What stops a malicious actor for triggering the API in a dev or jailbroken environment?
Team of 3 building aggregator for online car ads in Latam country. Target is to make a transparent price listing based on actual online offerings. https://carropedia.con
I’m still in awe the cost of delivery can be quite cheap. The margins are probably super thin because of competition. No wonder Uber wants to buy Grubhub to get more bargaining power
No surprise.
> it would be trivial to develop protocols that evade the tests if you could do that.

If it's trivial to evade the tests, then the tests are inadequate in the first place, and should not be trusted to be accurate.

Likewise, if an anti-cheat system relies on obscurity in order to not be bypassed, then it's a crappy anti-cheat system (and, mind you, would be far less necessary if multiplayer games didn't have a fetish for trusting the client to do potentially-exploitable things instead of insisting upon server-side validation, but I digress).

And likewise, if making your policy publicly-known will result in people skirting around the spirit of that policy, then the policy is poorly-written and should be rewritten to better reflect the intent.

Security through obscurity is not security. Full stop.
I'm wondering about the practicality of importing from URLs. I didn't see it addressed, but an import like this will be awfully hard to remember.

import { serve } from "https://deno.land/std@0.50.0/http/server.ts";

Anyone know if there are alternatives or a plan for this aside from "use an IDE to remember it for you"?
Oops. It just served me up “undefined” as a word that doesn’t exist. (Not an error message - it literally gave me “undefined” complete with definition after generating a few good ones)

Interesting nonetheless.
The proposed law would make the FBI require a warrant whereas right now they do not. Clickbaity article but it's still important
That's a cool idea! I know nothing about DnD; do people usually write the campaigns down and/or compose with a tool?
The pizza delivery operation is typically part of the pizza chain, and not outsourced to a third party that takes a hefty fee from the restaurant and the customer.

Easier to pay a kid $7.50 per hour to drive around than to pay $12 per order to a third-party.
I think the Rationale section tries to explain the benefits? https://www.python.org/dev/peps/pep-0554/#rationale

What I don't get is how they expect C extensions to adapt. I don't expect widespread support for this for like... a decade?
What exactly does Deno do? I still can't figure it out: is it a secure version of Node, if so, how?
My impression of ML has been that there are two types of jobs: one, the most common, where you're basically plugging values into tools like scikit-learn or TensorFlow and spending most of your day-to-day fussing around with data wrangling and general software development; and two, the heavy math jobs involving integral signs and Greek letters, which are much rarer and done mainly by people with top-tier PhDs at research labs.

Since at my age going for a Stanford PhD isn't an option, you probably mean by a better return on investment that I should dig into scikit-learn, Hadoop, the current AWS/Google Cloud/Azure options, that sort of thing. Is that right? Which, that's definitely sensible but not exactly what I was hoping for, since it's basically the same as the regular programming I've done, just with a different set of libraries. On the other hand it makes some use of my math background, and perhaps the dream of reliving grad school at a paid job isn't totally realistic anyway.
Interesting stuff. So they're using Mir and it's still in development.

So I think it was like 2013 when the whole "Mir scandal" happened. Like people getting up in arms, Intel refusing to carry their patches etc etc.

What was the use case that Mir satisfied? Was it allowing the use of Android GPU drivers?

But also what was the hate all about? Wayland years later hasn't replaced X fully.

Is it a Red Hat > Canonical thing?

Like I had a look at how netplan worked and really liked it especially how it has autorollback of network config.

But I looked online and the only opinion I saw was akin to "Canonical yet again tries to reinvent the wheel"
I think efficiency and impact are generally inversely proportional, so you're good either way.

If walking isn't near your aerobic limit then you'd be much better off doing something else for exercise than making your stride less efficient.

Walking as a kind of meditation or just to relax might be quite valuable. Then, the more efficient (relaxed) the better.
Just AI, it's getting... creative.
It's just a URL right? So could you not mirror the packages to your own server if you're so concerned, or better yet import from a local file? Nothing here seems to suggest that packages must be loaded from an external URL.
Because of the extensive photoshopping (and HDR as the other comment mentions), none of these photos look real to me, more like a video game background. Which I think is a shame, because I like ruins and scenes of industrial decay, so I do like the subject matter. And the author clearly did a lot of work to find these old cars and photograph their interesting character. I understand the desire to fix the light (and certainly the dark forest settings were difficult to capture), but it just looks overdone to me, no longer real life.
As a kid I was obsessed with cowboys and indians. Indians were the good guys in my book so I learned to walk like them to reduce noise - mid-foot first.

20 years later and the shriek my girlfriend lets out when she turns around and I’m right there materializing behind her back like a ghost.

It’s amazing. Took about a week of conscious practice in middle school and now that’s just how I walk. Heel first when barefoot or in slippers makes my feet hurt.
How to Get a Business Credit Card – (Step by Step)
So many people advocating against HTTPS in this page.

A lot of China developers had the same voice. They have been silent since 2015, when China ISPs and even some routers started injecting ads into plain HTTP sites. Many websites quickly adopted HTTPS for all of their pages ever since.
Sure do. I wonder if they have a checksum mechanism like browsers do?

You can add an “integrity” attribute to script tags in the browser.

https://developer.mozilla.org/en-US/docs/Web/Security/Subres...
Hi!
The response to your fears are in the announcement.
"If you want to download dependencies alongside project code instead of using a global cache, use the $DENO_DIR env variable."
Then, it will work like node_modules.
I agree with OP that writing a task in a non-core language is concerning, and also agree with you that there might be more going on.

I've worked with both types of team leads -- those that are there because they are technically proficient, as well as those that are good at handling the politics so the team doesn't and relies upon Sr. engineers to guide the project technically.

It's completely situational as to what is appropriate. Are you a 6+ person team in a large org (or in a small dysfunctional org)? Then you want some one who can handle the politics. Are you a 4 person team that owns your company's entire tech stack? Then you want someone who is really technically proficient.

Since OP mentioned the manager of this person, I suspect it's a larger org where politics is king, otherwise they would report to a VP or higher directly.
I'm in the process of getting my master's degree, but so far it just feels incremental to the bachelor's. Does the thesis make a huge difference?
Setting up Coveralls for your Ember Addons
> or better yet import from a local file

And this is different from NPM how? Except that I've now lost all the tooling around NPM/Yarn.
The New York Front Page Designed in Colors by an Artist, May 13, 2020
I think that just underscores my point, which is that containment means different things to different people. To me, it means only the resource limiting features from cgroups. I have no use for namespaces, bind mounts, virtual network interfaces, or any of that stuff. In my application all that stuff is either pointless or harmful. But to you, container means at least PID and mount namespaces.

rlimit is sort of a thing but it's not actually effective so to me it's not part of the picture. If unix limits worked, Google would not have needed to contribute cgroups before deploying Borg. Indeed, in this LWN article which is actually about control groups, they call control groups "containers". Just shows there is not a universal meaning of the term.

The earliest control groups patch I can find says "We use the term container to indicate a structure against which we track
and charge utilization of system resources like memory, tasks etc for a workload." It doesn't say anything about isolation, namespaces, or security, but it uses the term container to describe resource control.

https://lwn.net/Articles/236038/
So, if the Bernie voted “yes” (which is consistent with his usual political alignment), then the amendemnt would have passed, right? If yes, then how do you derive “his vote wouldn’t have mattered” from this?
There really was no hope of this without ditching reference counting, and consequently a much more destablizing change to the C API which was all but entirely unharmed during the 3.x transition.

There have been several attempts to bring new science to bear on solving the refcounting problem, I don't think any of them ever got far enough to be taken seriously

A significant chunk of Python performance is derived from optimizations made possible by the GIL - for example, so long as it is held, no additional locks are necessary to allocate a small object, unless that entails asking the system allocator for more memory
I wonder how broadly they define “internet browsing and search history”. I’m assuming email is somehow included. I wonder if mobile app data falls under the umbrella.
Doesn't it have to go back to the House anyway? Am I missing something? I thought that bills needed to pass in both the House and Senate before they can be signed into law?

Now in the House they'll have an opportunity to reject the bill with McConnell's original amendment, which is obviously dispicable. This all seems like political theater, like Senator Schumer allowed a vote on this today knowing Sanders would be out. This way, the GOP looks slimy and the House has more reason to simply reject the bill as is and Bernie Sanders can be the scapegoat --> more support for Biden. If this amendment had passed, it'd have been harder for the House to reject the bill.

(Sanders was out today with Ilhan Omar advocating for international debt relief for indebted countries. )
On procedural and declarative programming in MapReduce (2015)
I’ve been thinking a lot about whether the correct way to think about it is more of a “reset” than a “recovery”. So much about what we are doing with the economy right now seems theoretical that it’s hard for me to think about it any other way.
That's an accurate description of how I was feeling when deploying the site and learning kubernetes for the first time.
New tool helps researchers see Alzheimer’s early damage
I don't go to grocery stores; I have my groceries delivered, and I tip them well. If the businesses I buy from raised prices so they could pass the additional revenue on to their workers as hazard pay, and I had any confidence at all that they were actually doing that, I'd be glad to stop tipping.
Help us collect data for returning to work
I'll bite. Opinion follows, no need to downvote.

async def

is terrible, of the syntactic/semantic options it is the worst.

Best would have been to just allow creation of a name of a coroutine-usable version of a function-

def f: # normal f
....

a = async(f)

That allows existing functions to be turned into coroutines while not introducing the new syntactic pattern of a double word declaration.
> Stop using their browser, stop using their search.

The more people that do this in general, the better. We've given Google entirely too much power to control what people see and read (and it follows, control over what they say and think).

They don't have our best interests at heart, they have financial interests at heart, and everything else flows from there. I'm not saying this is evil, but it's certainly not _good_.
Science has proven that the average person's life is worth about $4, but I round to $5 to be generous.
That still doesn't prevent imported modules from yoinking anything you did grant access to, though. For instance, if my service connects to a DB then `uuid` can slurp the contents.

It'd be nice to have some capability model where modules can only access things through handles passed to them, but probably infeasible for a project like this.
Chartalism
It is not open source in any sense.

You can see it so that part is shared but if you try to use it you fall under a very different licease. If you try to modify and sell you can't. Modify and use you must pay. Use you must pay.

Bait open source might be a better term.
>JavaScript is the most widely used dynamic language

Wouldn't that actually be python?
Show HN: How to get started with Competitive Programming
The convention is to make a `deps.ts` and re-export what you need. Like this: https://deno.land/x/collections/deps.ts

I don't find versioned URLs much more difficult to work with than package@<version> though.
Wouldn’t you deploy generally deploy your services with a certain safety margin? I am pretty sure most systems I am working on could handle 10x pretty easily. Then it would get hard but it seems 2.5x is a pretty normal and expected fluctuation.
Here’s the bill, might want to read it before commenting:

https://www.congress.gov/bill/116th-congress/house-bill/6172

—— or better yet, read what the EFF wrote recently on it:

https://www.eff.org/deeplinks/2020/04/yes-section-215-expire...
You’d deploy builds that include all the dependencies. This isn’t Node where you have to download all deps on your production server, they are built into your deployed files.
I've read somewhere (but don't know if it's true) that prison meals are enriched with vitamins, and in particular with vitamin D. Could someone confirm?

Also, there are fewer old prisoners than old people in the general population.
There are way more browsers in use than Python runtimes. ;)
That is python's MO, is why things like the double underscore functions exist. Being able to declare a coroutine (not just use) is not a bad idea, but IMHO it was done badly.
I mentioned this in the GitHub issue thread (howdy!), but I strongly suspect it has to do with specific references to pornographic sites in the extension's manifest.

If only Google would mind its own business instead of playing mommy-knows-best and dictating its morality on grown adults.
I'm working on what I'm calling a "provenance server" that tracks the
spread of information. It's a little hard to explain.
In my notes I wrote "better Twitter" and "no bullshit".

Rather than track people surreptitiously it's completely public and
voluntary. It allows for feedback to let people "+1" items on several
dimensions (basically a big bag of emotional adjectives) and I want to
rank the "truthiness" of facts, from physical laws and math (at one end)
to opinion and interpretation at the other, with a (metaphorical)
low-pass filter for BS and crap.

All information on the network is public, there is no walled garden or
silo. The idea is to think things out together, in public,
avoiding repetition and noise.
Haha great way to put it
My postman mostly brings me junk mail, that I throw directly into a bin next to my building's mailboxes rather than bring it up to the apartment. That's not his fault, of course. There's no mechanism for me to tip him on any regular basis, unlike the delivery apps that let me add a tip to my credit card payment.
I think the primary way to manage dependencies should be in a local DIR and optionally, a URL can be specified.

The default in Deno is questionable choice. Just don't fuck with what works. Default should be safest followed by developers optionally enabling less safe behaviors.
Sorry, I am not saying early WWW was for porn or drugs. I am saying that was what ordinary people thought of internet. Similar concept is happening for Bitcoin as well.
I realize that it loads JS.

The issue is that the TypeScript it loads today, it might not load in the future.
Remember that revenue is a fact, profit is an opinion!
- "Rust has its own promise-like abstraction, called Futures. Through the "op" abstraction, Deno makes it easy to bind Rust future-based APIs into JavaScript promises."

That's exciting! I wonder if that binding is public for end users to use, or if it's an internal design
> We all know what the quality of academic code reputation is.

do 'we'?

considering a huge amount of common numerical software (esp with any kind of fortran lineage whatsoever) is based in some way on netlib.org code that itself was heavily developed in the BSD UNIX on Vax+ARPANET era within the academic/research community, I'm not really sure that, based on this comment, 'we' do..
I get the apprehension to try it yourself, even HN is a difficult forum for some conversations. I respect your decision to not try to edit the title yourself. But do you see how frustrating it is to be called out for my editorializing, which is essentially a UX limitation of the forum? Asking for explicit guidance from a moderator gets me pretty much nothing. You’re telling me I’m wrong, but you won’t really tell me in any explicit way how to do better, which I believe is a moderator’s responsibility. I don’t know how to do better other than to communicate is as clear terms as I can that I don’t know what to do.

I’ve made a case for why this story is relevant, and I feel it’s pretty strong. If legislation that’s facing a full senate vote around online privacy isn’t in the interest of a forum built by hackers, then I’ll take my ball and go home. I just haven’t heard a good reason why this shouldn’t be on-topic yet.
Ah, in this case, I would then have to commit my dependencies into my VCS to maintain reproducible builds. I'm not sure I like that solution very much either. I've seen node_modules in multiple GBs, and I'm sure Deno's dependency sizes are going to be similar.
From what I've read online it seems like hospitals and healthcare organizations will have the ability to generate codes. After a doctor thinks you could possibly be infected they will provide you with a code.
Yeah, in his later years I think Guido stopped having the energy to keep saying no.

Not a criticism. He deserves nothing but plaudits. One of best earned retirements in all of CS history, IMO.
There’s a few good reasons you need a certification to get liability insurance to climb radio towers and this is one of them.
> if it wasn't so hyper-focused on being a tiny embed-able language/runtime

What do you think Lua's developers should have done differently?

What stops Lua from being used as a general-purpose scripting language?
> Have high vacancy taxes, with an actual inspection and enforcement mechanism.

...only such taxes will bite landlords every time they have a legitimate vacancy between tenants.

> Structure taxes associated with the sale of a property be inversely proportional to the time time since the last sale.

... Only now people cannot afford to sell a recently purchased home to care for an unexpectedly ill relative in another state. Or take a new job opportunity. Or afford to move to follow their heart. Etc.

> Create a space for not-for-profit housing foundations, land trusts, etc.

...only now the trusts are competing with landlords with entirely different tax structures and perverse incentives to create bureaucratic nonsense because they don't compete in the fully free market.

> Build nice public housing for the middle class, without stigma.

...only now no one wants to build this because they're taxed when the new properties are vacant per your earlier proposal. And now the public is likely on the hook for losses.

> Label every house with data about what they pay in property tax, how much of a benefit they get from things like the mortgage interest deduction, and what any rental property is charging their tenants.

...only now people's financial privacy is wildly violated.

> Teach children to shame rent-seeking behavior instead of shaming people for their bodies.

... Only now, really? Really? Like in the schools we should teach people that providing a way for others to have a roof over their heads at considerable business risk is shameful? The ones that are presently being paid zero rent without recourse due to local edicts?

> Give tenants a small deduction on their rent.

... Only now you're trusting people to not inflate their reported rent to gain illicit tax breaks.

Any other unintended consequences worth spit balling?
Doesn’t GCC have annotations for that?
You can actually run things as Workers in Deno and get some sandboxing abilities: https://github.com/denoland/deno/blob/master/docs/runtime/wo...
Can you explain how this is consistent with his political alignment? Because Bernie Sanders (regardless of how you feel about him) has voted consistently against increasing the surveillance state. Hence why his vote wouldn't have mattered, because it would've been a NAY vote and NAY votes don't have any affirmative power.
Interesting, can you link me?

EDIT: I just tried in the TypeScript Playground (v3.9.2), it's actually rather worse than I thought, it prints not 'false' but the actual function itself as a value...
Zero processing is a little generous, for things like like ES Module support (and interop), ts-node can be a struggle to get going.
I was writing before that you don't need an infinite amount of dimensions to represent a color spectrum. Just that you need to move past a point into a 2-dimensional space instead, which our brains actually do because that's how we perceive sound, as a distribution of frequencies instead of as discrete real values.
That only applies to large, sprawling residential communities that have guards. Smaller-scale multi-family housing buildings (that have say, 20 units) with a locked gate at the entrance won't have the type of service you're describing.
It’s an alternative to node. If Node is Photoshop than Deno is Pixelmator. They both take in similar kinds of output and make similar things, but have a very different approach on how the tooling is built and used.