skysight-inc/HackerNews huggingface dataset:
After falling in love with the Destroy All Software style of genuinely advanced, all-encompassing programming screencasts, I started a YouTube channel with my own twist on the theme: Screencasts situated inside a decade-old, profitable, production web app, ones that emphasize actual workflow.

I've been an indie-hacker for 10 years so have seen the effects of my programming decisions over the same period. I've seen how fads come and go, sometimes wreaking havoc. I've also seen how coding decisions affect business (such as strategies to transform data into seo at scales of 10k+ items). I've seen how to keep something running day-and-night as if your livelihood depended on it - since it very much does.

That's the game plan anyway. I'm five episodes in: https://m.youtube.com/channel/UC17mJJnvzAa_e9qQqLIfIeQ

For fun I took up the tenor ukulele. Compared to any other instrument I've tried, it's got a much kinder learning curve. You can sound alright playing four-chord rock and pop songs in easier keys like C major after a month.
Another thing is that if you're using Node.js (or worse, Ruby or Python), your code is so inefficient that you probably don't care about performance differences; just throw more dynos at it.
Wilfully indifferent to the truth because Wright's position matched perfectly with what he'd been pushing for is a possibility between outright complicit and completely naive.

Wright was transparently, painfully, fake to every (other) technical expert. He can't make it 5 minutes talking about Bitcoin without inserting some claim which is obviously false or outright nonsense. Considering his chosen vocation (satoshi impersonator) he's been extremely uninformed about Bitcoin's technical history... worse, he tends to try to employ "bet you didn't know" 'zingers' based on reading some public summary which are just incorrect (because he misunderood the source or the source was wrong-- wright isn't very literate in code).

For a person who is technically proficient in Bitcoin to fall for him it isn't sufficient for them to have just been tricked by him, they also have to be blind to more red flags than a communist military parade. :)
It’s a stretch to call it interesting in that way, even if it ends up receiving a lot of upvotes and few flags. Is there anything that gratified your intellectual curiosity in the body of the article?
Huawei dev team submit Linux patch with backdoor, Huawei denies involvement
How do you list the dependency libraries if you don't have a package.json?

Do you manually install a list of libraries provided by the author's readme?
Chunks of China's Powerful Rocket Fall Back to Earth, Narrowly Missing NYC
Dunno about OP but I pin versions in package.json because it allows me to control the versions and upgrade major versions only when explicit and necessary, and rely only on the lock file to keep it the same between commit time and the production build.
Is this a new method for Google to keep tracking cookies active? I know many people who leave tabs open for months. Using tabs for “read later” seems questionable, performance wise.
Compiling to a single binary is on the roadmap, but was dropped from 1.0
It’s because they are heavily moderated.

See https://help.nytimes.com/hc/en-us/articles/115014792387-Comm...
Wow. Now I really wish they had released a pretrained GPT2 model.
Maybe I'm wrong (EDIT: seems I'm wrong!), but I feel like the people with dozens of tabs open (guilty) aren't the ones who use organizational features?

Also, it's a hidden feature, but you can already Shift+Select a group of tabs, and close/move/etc the whole group.
Seeking perfection leads to ruin?
Spinning up a new process is much more overhead than creating a thread. (You're going to execve, right?) Since you're usually reaching for threads when you would like extra performance, in this case creating a new process and dealing with its issues (how do I synchronize execution? How do I share data?) can be quite prohibitive.

(I should also note that the tooling for debugging and analyzing multithreaded programs has gotten much better recently, and claiming that language designers are lying to you and pinning the blame on runtime bugs is somewhat bogus since such bugs are clearly way outside the realm of why you should not use something for almost all applications, and affect non-multithreaded programs as well.)
Yes. They do actively work together to shape discourse across subredits. I have seen it happen myself on /r/worldnews a lot of times.

Consider if you are a big/rich autocratic nation state (read China, Saudi) that wants to censor and shape discourse outside their borders. You just buy these 5 people and boom, you get instant powers to shape and censor the discourse on the most viewed forums on Reddit and the wider internet.
I Became an Angel Investor
One Firefox extension "Tree Style Tabs", popular with dozens-of-tabs folks, has near a quarter million users. I imagine they will be objecting that tab groups don't go far enough :)
A multiplayer game where everything's text, the points don't matter, and players can program any region of the world with arbitrary WebAssembly.

Can be played in a browser or terminal.
this is a great read but damn that sounds horrible
Others already wrote about Firefox tab groups and containers. I do use containers but I use a different way to group tabs.

I'm using Ubuntu with Gnome shell customized to look like the old Gnome pre 2014, or was that 2012? I have a virtual desktop per customer and one Firefox window per desktop. One "customer" it's my own pet project of the moment and another one is where I keep my email, WhatsApp web and Telegram desktop and other social media in their own private container tab. So I group per window and I need less functionality from the browser because I rely more on the OS.

I believe that Gnome calls those desktops Activities but I disabled nearly all of the Activities related stuff. I have hotkeys to move to desktops and I use them like old school virtual desktops, a fixed number of them. IMHO yhe less the screen moves the better it is.
Thanks for the feedback -- definitely agree on the demo! Based on some feedback from one of the Show HNs, I'm planning to make some fake little chat bot, so users have something to interact with (albeit in a very scripted/formulaic way) instead of sending a link to a friend. The chat bot will replace the static demo entirely.

It's definitely a style change first and foremost. I got sick of this pattern: friend sends message1, message2, message3; I respond reply1, reply2, reply3. And then they probably reply to some (if not all) of my replies. Usually it's pretty clear which message corresponds to which topic, but it's always messy. With XpanXn, it's explicit and visually obvious.

Each topic column is a fixed width. You can pan around the chat canvas and zoom in/out exactly as you'd expect! In fact, another motivator was knowing that a lot of people like really small font sizes on their phones. This way, you tailor font size just by zooming in/out. There's definitely some opportunity to improve that, but for now, I think the ability to pan tends to most of that concern.
Don't know about Hollywood but NBA is both. Meritocracy selecting privileged genes.
Do we know if it's not still relevant? Being out of date only means it might not still be relevant...
A mix of playing Piano, working on an set of XMPP related libraries and tools in Go, and trying to get a handful of internet drafts accepted by various IETF working groups.

Digital piano lessons over meet.jit.si aren't as great as in person, but at least I'm able to keep up with it. Currently working on Liebesträume and Handel's Sarabande on the classical side of things and In The Mood on the jazz side.

The XMPP library is going well and I'm hopefully about to start rewriting the authentication bits: https://mellium.im/xmpp/

And finally, I've got some I-Ds submitted and in discussion in the IETF's TLS and KITTEN working groups. One that documents best practices for authentication and password hashing and storage: https://datatracker.ietf.org/doc/draft-whited-kitten-passwor... and one that defines a channel binding mechanism for making tokens and secrets only valid over a specific TLS session (right now it's specific to SCRAM based auth, but that will likely change soon): https://datatracker.ietf.org/doc/draft-whited-tls-channel-bi...
Probably everyone's seen this, but if you haven't..I thought it was very funny. Didn't know much about Jobs until recently, but watched Steve Jobs: The Man in the Machine and Pirates of Silicon Valley and some other stuff shortly before seeing this – and thought "Ohh - he was Joe McMillan in Halt and Catch Fire, only Joe evolved into a decent guy" – and it seems pretty factually accurate at least :

Bill Burr on Steve Jobs (5 mins) https://www.youtube.com/watch?v=E3s-qZsjK8I

p.s. My answer is No, I didn't know the guy. Strange question. List of dead people I miss: my mother.
In 50 years an old 'barn find' Tesla might seem stupidly simple compared to contemporary transportation devices. It might even function without network connectivity.
The baseline mortality rate for an 80 year old is about 0.5% per month. The mortality rate for an 80 year old with coronavirus is about 15%, with nearly all deaths occurring within a month. So treating all deaths in coronavirus patients as being caused by coronavirus would only overstate the true case fatality rate by 3% or so. The ratio is similar for younger ages. Not sure why Joe Rogan or Elon Musk’s opinion would be relevant here.
This should be a must-read for engineers designing systems requiring security. Once you wrap your head around the sheer volume of vulnerabilities from the human angle, a lot of the "Zero trust" methods enshrined as best practices start to make a lot more sense.

Acquisitions like this one: https://techcrunch.com/2014/08/07/facebook-buys-secure-serve... early on were, in part, in online forums i was a part of at the time, ridiculed for being tinfoil-hat. Fast forward a few years and that would be laughable.

The history of Computer Science has been full of open collaboration and trusted, tight groups. We're now in a different world.
Allow me to provide an extremely relevant example (medium sized code base).

About 100 python files, each one approximately 500-1000 lines long.

Imagine in each one of these files, there are 10 unique imports. If they are URLs (with version encoded in the URL):

- How are you going to pin the dependencies?
- How do you know 100 files are using the same exact version of the library?
- How are you going to refactor dependency resolution or upgrades, maintenance, deprecation?

How will these problems be solved? Yes, I understand the benefits of the URL - its a unique identifier. You need an intermediate "look up" table to decouple the source from the codebase. That's usually requirements.txt, poetry.lock, pipenv.lock, etc.
I was actually gonna ask, isn't hoverzoom a malware? But I guess this is a fork of it. I've since switched to Imagus but I do miss HoverZoom.
I'd assume you can just use regular node modules in that case?
> If goog did provide guidance on permissions, goog would literally have to audit every app in the store, or come up with a way to separate bad actors from good ones.

This makes no sense. For the sake of the grandmas, Google already needs to audit every app in the store and separate bad actors from good ones.

How in the world would making it more clear how to write more secure extensions possibly worsen the extension store's malware problem?
Have you thought about adding a “How to hire me” section?

I couldn’t find it.

Never be afraid to ask for the sale.
Which pretty much blows up the idea that Google's vagueness is about security.
> Based on how Patty Murray (D) has said she would have voted YES but wasn't able to get to DC in time, it's clear it was never going to pass to begin with. This happens often – someone like Mitch McConnell might whip the votes, realize they're ahead, and allow a few Republicans that are at-risk to vote YES to provide cover for them in the future.

So make them vote yes. If they think it is a weakness to vote yes, all the more reason to force them to do so.
You can't improve your walking technique unless you improve your life. Your posture, your gait, your movements are a complete reflection of how you feel.

If you feel like you're carrying a load on your shoulders... your shoulders are gonna show that. If you feel like you have to clench and grind through your days, your jaw is going to show that. etc. etc.

A really interesting question to reflect on is when someone gains weight, what determines where the weight goes? Their stomach? Their thighs? Everywhere evenly distributed? etc.
Even "basic" can get muddled with hopefulness about product features which are carts leading horses. To continue with the metaphor, chasing carrots before the horse-cart even functions leads to half-baked software.
> That combined with the 'download random code from any url

What protection does NPM actually give you?

Sure, they'll remove malware as they find it, but it is so trivially easy to publish packages and updates to NPM, there effectively is no security difference between an NPM module and a random URL. If you wouldn't feel comfortable cloning and executing random Github projects, then you shouldn't feel comfortable installing random NPM modules.

> and run it immediately

NPM packages also do this -- they can have install scripts that run as the current user, and have network access that can allows them to fetch, compile, and execute random binaries off the Internet.

From a security point of view, Deno is just making it clear up-front that you are downloading random code snippets, so that programmers are less likely to make the mistake of trusting a largely unmoderated package repository to protect themselves from malware.

I lean towards calling that a reasonably big security win on its own, even without the other sandboxing features.
Also learning the uke. I wonder what hacks you've figured out? My first insight was:

- it's easiest to remember chords when you think of them as fundamental ur-shapes with the "bar" shifted up (sometimes requiring additional fingers)
> If goog did provide guidance on permissions, goog would literally have to audit every app in the store

You’re talking about vetting suppliers and products in order to ensure they’re selling safe products that consumers want. That sounds like an ordinary part of every retailer’s job to me.
Am I misunderstanding this? My phone would broadcast a daily unique key that could theoretically be used to track my location?
This case is not about covid-19 facts but about constitutional law in Wisconsin. The various legislatures and Congress tend to be jealous of their powers and prerogatives. Executive orders in the U.S. can't have statutory force without supporting statutes.
I am working on my new year resolutions and learn to invest in individual stocks. I am slightly biased towards tech companies.

Why I am doing this:

- Improve my business (learn about different business models)
- Improve my product sense
- Hearing good CEOs talking at their investors is a great lesson.

What I am building:

- Use Azure to automate stuff and set up notifications for events I am interested in.

- Use python to backtest strategies.

I wrote this thing last week
https://medium.com/@davinci260/why-only-buy-when-you-can-als...
I hope our downtown and food culture can survive the shutdown.
>but will be forgotten in the end.

We all get one song called life and it is meant to be danced to while it is still playing. Have you ever asked yourself: “am I dancing?”
Don't feel too bad about your tab hoarding, I'm at 3 windows with 4630 tabs and I'm pretty sure I'm closer to a stress test than a user. Chrome can't function with 1/20th of mine and Firefox runs smooth and fast. Restarting with loading all the session data takes seven or eight seconds total. It can't just be the different multi-process models so I'm pretty sure that the Chrome team can do better.
I like all Strang's books... at least the ones I have.
I don't have his Learning from Data book, yet... however.

I also really like the applied linear algebra book by Boyd Vandenberghe:
https://web.stanford.edu/~boyd/vmls/
Free PDF is available on their website.
There is Julia and Python code companions for the book and lecture slides from both Profs their websites. Also check out their other books, many of which have free PDF's available.

I can also recommend Data-Driven science and engineering by Brunton and Kutz.
http://databookuw.com/
There used to be a free preprint PDF of the book but I can't find it now. Book is totally worth picking up... MATLAB and Python code available. Steve Brunton's lectures on YouTube are pretty damn good and compliment the book well:
https://www.youtube.com/channel/UCm5mt-A4w61lknZ9lCsZtBw/fea...

Another really cool book is Algorithms for Optimization by Mykel Kochenderfer and Tim Wheeler: https://mitpress.mit.edu/books/algorithms-optimization. Julia code used in book.
> If they aren't qualified to know when security must exist, they are not likely qualified to implement it

Actually that's incorrect. It's simple to add a LetsEncrypt cert in the right way -- but not easy to come up with all possible ways people might want to attack your site.

@kerkeslager wrote: "But there is always incentive for bad people to hack a server ..."

Those are good reasons, the ones you listed -- and yet another reason is that someone might want to use your website or app, to break into someone's else's website, e.g. by adding a link to, say, Google's login page, but the link is in fact to a password stealing site. -- And it's impossible to know when or if someone has the motivation to do such things to some of one's visitors / users.
> Stanford study [2] shows same death rate as flu.

Oh you mean the article whose title is "Study challenges reports of low fatality rate for COVID-19" and adds that " data scientists estimate that the fatality rate in New York City and Santa Clara County in California can be no less than 0.5%, or one of every 200 people infected."

(contrasting a previous study)
This is bad, but you are being way too dramatic.

If it takes two generations to recover from this, then this is worse than WW2's impact on Germany.
Neat, and works well for the toy example with 4 tabs open. I don't really think it would work as well for the "tab collectors" as they think. They seem to be aware of this too, since none of the screenshots in the post have anywhere near what I would consider a significant amount of tabs open.

I use the tree style tab extension on Firefox[0], which I cannot live without. Horizontal tabs become useless after about 15 of them are open. Tree style, 50 tabs are just as easy to navigate as 5. I really wish browsers would build this in as a native feature.

[0]: https://addons.mozilla.org/en-US/firefox/addon/tree-style-ta...
I'm just thinking out loud but I wonder if there was an easier way to visually identify certain tabs that seem related. Right now all I have is the favicon but there are so many favicons that look similar its difficult to tell them apart.
Yes there is: https://www.govtrack.us/congress/votes/116-2020/s89
Is there an actual per page variable cost incurred to provide this service? Assuming no, as consumer of these types of services I would like to see a pricing formula that doesn't get so expensive for larger page count documents.

Even something like $1 + $0.05 per page would be nice and solves your micro transaction dilemma on <3-4 page faxes.
True, it's more of an upper-bounds of sort. There's several preprints from European researchers giving IFR's of 0.08% and 0.37%. So it works pretty well from a Fermi estimation method (https://what-if.xkcd.com/84/) (e.g. Bayesian inference really). Also, the age distribution in prison isn't necessarily the same as that of the general population. There's lots of limitations for a comparison to the general population but it gives some bounds.

I'd think the statistic of "average years of life lost" based on expected average of lifetime. Otherwise not sure of a better statistical way to measure age-adjusted IFR, which would be helpful.
This version has the slides and video side by side: https://www.youtube.com/watch?v=nDAfZK8m5_8 might be easier to follow.
Had TOS, but mild enough for physical therapy alone. Fingers tingle thinking about it. But wasn’t so lucky with ulna related issues :-/
What about when you want shared memory between threads?

Sure a pipe works in the unidirectional case, but what if you need to communicate back? Signals are a thing, but they're worse than threads. Multiple processes and shm_open is a thing, but is that really easier than multithreading? (You still need mutexes, and such, but now they're across processes... yuck!).

Also, for many use cases, "#pragma omp parallel for" is often easier than anything else.
They are low-level APIs, so strictly worse for the purpouse.
Long-term economic damage is likely to be reduced by containing the pandemic. This isn't either/or.
vitrus
vit·rus
a large edible tropical fruits. They are typically small and white, typically having white spot or dark berries.

How many contradictions can they pack into one definition?
My mother took her own life when I was a teenager towards the end of a tough fight with cancer (it's likely she would have died eventually). I'm about to turn 42 so I have some distance from this. She did it with a handgun and because it wasn't legal for her to get help so she had to do it alone in secret. I came to learn later that my parents fought about this because my dad is a doctor and understood how to help her but would have gone to jail for it and lost his career. I also think he just couldn't bring himself to do it, so having legal medical help available might have changed things?

This obviously derailed my life and my sisters and my dad for many years. I have some skepticism about if/how assisted death would have been better but I suspect it would have been. I imagine (perhaps wrongly) we would have been able to say goodbye and give her a peaceful end. Maybe have counseling leading up to and through it?

I'll respectfully skip the 1-4 specifics. I just believe that people who want to die should be allowed to do so peacefully, and no one who objects should be obligated to help. With the hundreds of millions of guns in the US, violent suicide is widely available here, the debate is more about if a peaceful death is available and I think it should be within thoughtful constraints. Those that disagree with me are entitled to their opinions though.
Wow, I'll definitely be picking up both of those cards. Thanks for the tips. I had a feeling the serial card would be my ticket to the Internet, rather than the impressive-looking, but clearly past-its-prime modem card.
Parenting.

A full time work from home setup with children at-home is already draining energies
No, the daily key is not broadcast; instead it's used to generate a series of rolling identifiers to broadcast. The rolling identifiers change much more frequently. The daily keys don't leave the device until/unless filing a positive diagnosis report.
Yes, but there's much less support for Executives acting alone. We have a republican form of government where only the legislative branch can pass criminal statutes. In this case the Wisconsin Legislature sued to preserve its powers and prerogatives, as well it should. That does not mean that it won't be amenable to passing supporting statutes.
Wrong! I have a very sophisticated system for managing my tabs. I'm very breadth-first when browsing the web and I also switch contexts a lot. Tabs are like a big Todo list for me.

For a while, I would get really frustrated when chrome would crash and close all my tabs, but recently I found a ln extension that keeps track of my tab history as a big tree! Yippee!
Coronaspeak – the language of Covid-19 goes viral – 2
But Marginal Revolution is well known for having the worst comments on the internet. Literally nothing but edgy one-sentence snark. It’s just a step above caveman grunts.