skysight-inc/HackerNews huggingface dataset:
I think it is a silver bullet of enlightenment of a certain understanding of what programming languages are. It is not a silver bullet for all of your programming tasks or problems.

Most people I know who cast off Lisp are people who read the Wikipedia page, didn’t feel enlightened, then began to complain online about how they were disappointed by their Lisp experience. Or perhaps they went a tad further, got upset by Emacs being unfriendly to setup, and proceeded accordingly.

In the Modern Age (TM), programming Lisp is unlikely to convince you to change your usual dev stack to it. But if learned properly, it will enlighten you on the structure of a language and how syntactic malleability is a powerful abstraction for solving many kinds of problems.

Enlightenment usually comes from realizing that it’s not a feature bolted onto Lisp, but an exposed interplay between many otherwise ordinary aspects of programming languages: syntax, semantics, interpretation, and the runtime. At this point one typically “sees” how this interplay could (and perhaps even opaquely does) play out with other, non-Lisp languages.

These kinds of things could in principle be learned in a compiler course, but compiler courses tend to be extraordinarily opaque as to how such a course would help your day-to-day coding. Lisp provides a visceral, hands-on experience of many (though certainly not all) of the same principles.

If you happen to be the kind of programmer who likes absolute control over your environment, because that helps you work through gnarly problems more efficiently than duct taping a bunch of dependencies together, then you may actually end up switching to Lisp.
This. I think one of the places where young entrepreneurs get stuck is in wanting to build something that gets noticed as much (or more) than building something that makes them financially successful. There are thousands of problems that need to be solved and can be solved by software. And almost all of them are super boring and niche specific.
You don't, but I don't like that mindset that an unverified certificate is somehow not better or even worse (see browser UIs) than no encryption.

Encryption prevents sniffing, Encryption + trust prevents sniffing and MITM. Providing sniffing protection is an upgrade.

As an example, say HTTP would always upgrade to HTTPS with a server provided public key. That would be more secure than the HTTP we have today, even though it wouldn't prevent MITM.
Guile is more than a Scheme implementation. You can implement a completely new language for it (somebody recently did Python) and reuse their embedding capabilities. Guile comes with an Ecmascript implementation, just to show that it can be done.
Thanks for sharing this. I'm part of the team within GitLab's Quality Engineering group that is tasked with performance testing GitLab. We've been working on vastly increasing our performance testing and visibility for about just under a year now.

We know there's work to be done with GitLab's performance and it's a top priority for us moving forward. We've blogged recently on our (Quality) efforts here - https://about.gitlab.com/blog/2020/02/18/how-were-building-u... and you can also see all the issues we've got here - https://gitlab.com/gitlab-org/gitlab/-/issues?label_name[]=Q....

I've been digging into these results today as a priority. While we're using different tooling (k6 and SiteSpeed respectively) and a different methodology (SourceHut is running tests with simulated low bandwidth) our tests are indeed generally showing the same pattern and I've confirmed we have issues raised to cover the problem areas.

Alongside this we identified a few gaps in our performance testing that we wanted to address immediately:

* Our File Blame page (and API) in particular was sobering to witness and we've added that into our tool's tests today (that you should be able to see in our results from tomorrow - https://gitlab.com/gitlab-org/quality/performance/-/wikis/Be...). We've raised 2 top priority issues for that area that will hopefully get tackled soon.

* Our file view page, with larger files, is also not as good as it should be. We've pivoted our tooling to test the worse case scenario today with a much larger file and raised an issue for it also for our dev teams.

As part of the company wide effort to improve our performance I'm always keen to see new tests being done or highlights of areas we haven't been able to cover yet so thanks again for highlighting this and hopefully you'll see our numbers continuing to improve soon!
“What do these people in power do all day ? “

Traditionally the first thing they do is not to follow their own rules. Happened already in this crisis with politicians going to the gym or hair dresser while locking down everybody else.
Aid? The big banks orchestrate much of the drug and human trafficking trade on the planet.
Japan's Great Love for Nietzsche
The loading animation reminds me of the warping effect in EVE Online.
I believe this commit has background: https://github.com/golang/crypto/commit/d6449816ce06963d9d13...

To be fair though, that package was depending on a private API to begin with.
Kickstart Programming
DANE could make CAs obsolete, and the internet more secure:

https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Na...
Is China Buying BlackRock?
Certainly as a payments system, Bitcoin looks to be failing/has-failed/will-fail. But there is another possible future other than being a fake-internet-money "asset class for speculation... devoid of fundamentals": a long-term return to something akin to gold-backed aka bitcoin-backed fiat currency.

Personally, I don't think deeper integration with traditional fiat currency/banking systems is a sign of failure; rather, it's the first step towards this possible future (which of course, is highly unlikely still, but 20 years ago it was 0% likely, 10 years ago it was 0.00000000001 likely, and now, who knows maybe 0.0001 likely?).

Of course, this too, is all speculation. It's hard to predict the future.
The Beer Store
A lot of these are personal lifestyle issues. IDK I enjoy remote work, to each their own
This is a slightly different tool. I'd hope that we won't have one of those every day now though.
Massive surveillance will be a boon for the big tech companies. They already do everything they can to get as much data as possible. Even better, if it’s government sanctioned.
I agree with this wholeheartedly.

I had to maintain a lot of old custom appliances and the like for which no ready replacement existed. Niche stuff where you had one or two vendors in the whole arena. If they were running on Apache, it was hidden somewhere with a big "WARRANTY NULL AND VOID" sticker. For all of these custom jobs, HTTPS was an afterthought, if it was present at all. For these, I had to generate cert requests through a menu system, load up certs through a menu system, and the like. I couldn't just CertBot it. That's never going to happen.

Frankly, the latest cult fad ("all must be encrypted, heretic!") has not made my life easier nor brought any benefit to my users. Nobody was going to MitM for this stuff. It's just another tiresome fashion like the people who relentlessly put W3C validation boxes at the bottom of their webpages, only now it is getting shoved through by the same browser vendors who wonder if us mere mortals need to see URLs at all.
Google pay varies by office (quite a lot) and they're upfront about it but it has nothing to do with housing costs. It's based on the cost of hiring in the local market.

I am voluntarily transferring from Google SF to Google London and I am taking a significant salary cut. London isn't really any cheaper to live in, but you can hire good developers for much less in Europe.
My New Old Apple IIe Computer
I can't help but think of the author as spoiled and out of touch while worshipping a utopia that never was and forgetting both the brutality of the past and the fringes of today who lack much of the benefits.

"What has efficency done for us?" is a real straight line, a question that is a set up for a gag the length of an essay that makes "Who is John Galt" look terse.

Forget the aquaducts of the romans. Aside from allowing specialization to give increased benefits like advanced medicine, education, a rising standard of living for a growing population with a small minority engaged in agriculture, and reducded environmental impact what has efficency done for us?
In Sweden, engineer is also a protected title, but computer science is aligned perfectly with software engineer because engineer basically says 3-5 years of "practical math of that field". Learning Python would not be "practical math", learning the O notation and linear algebra would.
The XPS 17, Dell’s largest and most powerful laptop
https://news.ycombinator.com/item?id=23141148

Considering this was posted just 2 days ago by yourself and there’s a pretty active discussion there, this thread is unnecessary.
I’m not a Mautic user, but its future looks brighter now that they were acquired by the company behind Drupal.

https://www.acquia.com/about-us/newsroom/press-releases/acqu...
> This leads to interesting situations with, say, PowerPC Mac software sites. Either they have http connections, or they use user-agent sniffing to downgrade TLS

That doesn't work. The user-agent is passed after the encryption channel is established.

What they do is offer all the options, and the client picks the best one they can support.

However, why would this need to be HTTPS to begin with? If you're not transmitting anything private, HTTP works just fine.
The first introduction of the Shockmaster (the stormtrooper helmet stood out to me in this list) was AMAZING:

https://youtu.be/Fahljd_0xjA?t=74
If you're a Java shop you can sometimes use Clojure since it runs on the JVM. It has 100% access to Java classes which gives you a huge existing ecosystem despite the language being fairly niche.

From what I gathered when looking around some people don't consider it a Lisp, but it never bothered me much.
This mirrors Adam Smith’s later opinions on division of labor

After getting all excited about it early on in Wealth if Nations, he later changed his tune in the book.

Later he went on about it being a monstrous thing that would make people as stupid as they can be

It’s a Brave New World out there

I am not a Luddite. Nor do I believe a minority of the human population who can afford these things are owed them at great expense to the planet all humans have to live on

It’s authoritarian to force a future mess on others. That they’d have to chose to clean up & stabilize instead of explore

But the west of course is a bunch of nihilists at heart. Too busy ogling the machine itself to be distracted from the idea their impact could possibly be harmful to ourselves or the species

https://youtu.be/y_7V7tEj2Lo
Ask HN: Best place to learn about server-synced CRDTs?
JavaScript Features to Forget
Venture capitalists are often looking for billion dollar companies. If you found a company and grow it organically to where it's worth $25 million, then sure, you are no Bezos, but you are fairly successful (financially) by any standard. But venture capital doesn't care about $25 million companies, because their business model involves investing in so many companies that fail that a $25m success doesn't really move the needle for them. They want to see B's not M's in their companies' valuations.

Meanwhile, the media doesn't have much to work with when reporting on privately held, non-venture backed companies. There's no official valuation unless the company sells (sure, once you get to be the size of Cargill or Bloomberg, reporters will try to calculate some sort of valuation, but very few companies fall in this category), and the owners typically have no good reason to want publicity from the media, especially if they are selling B2B.
Some provocative napkin math:

Average dev salary in the US: ~$100,000

113M / 100,000 = 1,113

Would it have been cheaper for Interactive Brokers to have hired another 1,112 software engineers? What about 111.2 security experts commanding $1M salaries? Maybe they could have given $10M prizes to the top 11 researchers in formal verification.

Do security vulnerabilities impose meager wear-n-tear costs on businesses and economies? Or is the cost more like that of a natural disaster?
There’s no way decent companies are doing this. Any company that does this probably also has skeleton budgets with underpaid staff.

I just can’t fathom it.
Any web server software set up in 2000 and still running today unpatched could be pwned quickly. Including and especially NT 4.0.

When you're running a server, TLS is not the only service you are dependent on; you're also dependent on security updates. If they're not backported, you'll need to make version upgrades.

Arguably it's better to think of every piece of software running on a server like it's a service, to maintain security and performance in an Internet full of hostile actors.

I don't even understand the mindset of wanting to run a live server on ancient software, aside from doing it as a hobby. In which case, it's pretty typical for such hobbies to require extra work and care. Driving around in a car from 1940s takes more maintenance work, and is less safe, than a modern car, and everyone gets that.
Bet what, exactly? I already wagered and lost karma, and I'm wagering more just by replying to you.

Air travel around the Pacific Rim is down by about half a nine to 1 nine [0]. Worldwide, airlines are taking beatings of about half a nine [1], which isn't that much, one would think, but airlines famously have supposedly tight margins of about 1% [2][3], and so even a minor system shock is impactful.

Sure, 99% reduction, 2 nines, is a bold statement. I'm merely imagining what would happen if both Boeing and Airbus went under. Without their facilities and engineering knowledge, it could take decades for a competitor to ramp up. Airbus themselves took decades to ramp up against Boeing, and they were purposely assembled for that task [6].

Most Boeings in the air are a little dated in terms of design, which has led to scandals (read: "crashes and loss of life") in the past few years. Specifically, the 737s and 747s account for 77% what Boeing's got in the air [4]. Similar numbers for Airbus, with again 77% of those planes being the A320s [5]. That's a lot of planes that rely on the duopoly for not just continued production, but also maintenance; aircraft are continuously costly and require expertise and care.

[0] https://cdn.statcdn.com/Infographic/images/normal/21027.jpeg

[1] https://www.nationalgeographic.com/travel/2020/04/charts-sho... Apologies, but JS will be required to render the graphs. Ugh.

[2] https://www.economist.com/the-economist-explains/2014/02/23/...

[3] https://i.insider.com/4fdb8a20ecad04051f000016

[4] https://en.wikipedia.org/wiki/Boeing_Commercial_Airplanes#Ai...

[5] https://www.statista.com/statistics/263394/airbus-aircraft-i... More JS, sorry again.

[6] https://en.wikipedia.org/wiki/History_of_Airbus
You can use Let's encrypt and their DNS validation method, and set up a machine.internal.corp.com DNS entry pointing at its internal IP address.

Only problem is that you'll need to update DNS records every three months to get a new cert; some DNS providers have APIs that certbot can use.
Native to the platform is the common meaning on HN. Native to users is a good point, though orthogonal to reasons HN users may prefer platform-native: lower memory and CPU usage, platform style, familiar shortcuts and behavior.
it’s a different application
I don't understand, anyone who can MITM can also sniff, right?
In my industry (construction wholesale), there's a whole lot of systems that:

- don't have APIs

- have partial APIs (e.g. ask the company if they have an API and they send a PDF of a rough incomplete API they use internally and tell you that it can be used with basic auth and can change at anytime with no warning)

- undocumented APIs

Zapier probably doesn't even have these systems on it's radar but APIs and connectivity are sorely needed.
Fitbits are a firmware update away from functioning as home pulse oximeters
The US doesn't give open source a pass on sanction enforcement. Witness the heavy-handedness of Github post acquisition. Maintaining US operations for a global team can create issues as the political winds shift.
TBH these managers probably don't have work life balance, spend 12-16 hours a day on work, probably less than 4 are productive, and believe their subordinates and ingrates if they don't share the same "devotion" that they do, regardless of ability to complete the assigned job/task.
OAuth 2.0 implementation for various providers in one place
He’s talking specifically about disposable consumer tech, cranking out machinery that sits and rots when reality throws a pandemic at us. Chasing new literal machines for the sake of chasing new literal machines

It’s the difference between focusing on biology of a tree and not ecology of a forest

Not systems efficiency in general, specific efficiencies we’re chasing by describing how much time we put into them relative to other time and resource efficiencies we can look for

There’s no efficiency to be found in launching a new phone every couple years? In any context?

Maybe your take is what’s “terse”?
The first lady cited in the story is overextended and if I am supposed to feel bad for her, I don't. She took a risk in taking out 1.2 million in mortgages and should reap the profits or losses from said risk.

Then there's these people- "The townhouse they bought 24 years ago was at the center of their plans to fund retirement. Now they may have to dip into their retirement savings to cover the mortgage." Why isn't that mortgage paid off yet? Sounds like they made some bad decisions. And any place bought in Boulder 24 years ago could be sold for at least 3x what was paid.

Edit: these are 2 separate people discussed in the story.
I tend to joke that lisp is a cult
>And welcome to the frontend
Thanks! I can't believe it took me so long to embrace it haha.

Yeah, so anyone that adds a message to a Thankbox can leave their email in order to get a link to edit their message before the box is sent. This is optional - I really only aim to collect data that's necessary.

I'm currently working on a feature to allow the recipient to respond to everyone who contributed (if they left their email) which I think would address what you mention.
Show HN: Creative examples of businesses and startups reacting to Covid-19
I searched in vain for a similar libre platform for Go. It's too bad. The 19 by 19 board is not suited for mobile screens.
Anyone want to chime in on why pivot_root is preferable to a chroot jail? It's kind of hand-waved in the article.
I see that now, thank you!
Mobile-readable version of your list of Clojure design decisions:

- VMs, not OSes, are the platforms of the future, so target the JVM

- Object Orientation is overrated, but polymorphism is a good thing

- Multi-core is here to stay, so use immutable data structures to greatly facilitate writing correct concurrent programs

- Leverage the strengths of LISP but give it a modern overhaul (most notably, throw in different parenthesis)
Dell launches new XPS 17 and redesigned XPS 15 with 16:10 edge-to-edge displays
That’s one thing I don’t get. There are a lot of very impressive people like Wyden out there but when it comes to running for president it seems the best the country can come up with is Biden or Trump. Is running for president so unpleasant that anybody halfways sane will not do this to themselves ? Or what else is going on? How could the Democrats come up with a washed up 78 year old and skip a lot of very capable younger people?
Haha...Security Breach reference. I loved that southpark! https://southpark.cc.com/clips/410450/security-breach
I was waiting for a clarification on the poster's meaning of "oomph". Usually we use that term to mean something about "goes faster" or "does more" or "pulls harder".

Comparing the SoCs of the RPi4 to the iPad Pro, the Pro's A12Z has 8 cores vs the 4 of the Pi's Cortex-A72, more L1 cache, way more L2 cache, 8 GPU cores on chip (vs the Pi's separate GPU (which has at most 4 cores)), etc. etc.

The only meaning of "oomph" which I could imagine that would put the Pi ahead of the iPad would be in flexibility in terms of what can be done with the device.
> I wasn’t asserting or claiming one way or the other.

You verbatim asked "why pay $200k for a software engineer same talent can live outside of the bay area and can do with 1/3rd of the salary" and you got a response. If you think there's truth in what I'm saying but find that response "unpleasant and combative", I have two suggestions for you:

1. Communicate more clearly. If you are meaning to express an argument rhetorically or as a "devil's advocate" but it's easy to misinterpret your statement as if you simply support it, consider rewriting your comment for clarity.

2. Rethink your premises. If you actually do believe what it is you're saying, consider that you're the argument of "same talent for 1/3rd of the price" is the original offshoring argument, which has well known conceptual issues.

If you're more thoughtful about checking your assumptions when you could be wrong, it will be much less likely that you end up in a situation where you find yourself saying "Gee, I found so and so's response unpleasant and combative, even though there is truth in what you're saying." If you put your hand on the stove, do you criticize the stove, or do you realize that maybe it was a mistake to put your hand there and then move it away?
My mother-in-law is trying to teach driver's ed over Zoom. It's a horrible clusterfuck, because they are trying to force everyone to keep their webcam on at all times as a means of tracking attendance. The first session was 75% her shrieking at kids because their internet connections were dropping out or Zoom was glitching and the video feeds froze. Not to mention that Zoom can only show a 5x5 grid at a time, and some of the classes had 27 or 30-something kids in it.

It's not easy for normies to deal with video-conferencing... Take your normal enterprise conference call bingo card, and put it on turbo.
Making 99.9% of websites ask for js permissions, and often break if the user clicks no, is just adding unneeded friction for the huge majority of cases. “Do you want to accept X” is also a terrible security boundary since most users won’t be able to tell when it is reasonable vs an attack scenario.

The HN community loves static sites and the old web. But this is a tiny tiny tiny minority.
I'm sure Oracle would love that, but fuck Oracle.
I have a mechanical engineering BS, but I work as a "software engineer". None of my engineering friends in college had a problem with "software engineer" as a title.

Pretending that engineer is a restricted title does not match the reality of the world today, and is unnecessary at best and creates miscommunication at worst. Language evolves and certain words become more lax and widely applied. We can prevent it in cases that are sufficiently technical (Zoom does not have E2EE, that's a blatant lie), but getting the world to use "literally" as it was originally defined is no longer feasible IMO.
How old is the server for this scenario?

If it can't run a modern web server as a proxy directly.

Then maybe you could set up a VPN tunnel between the server and your fancy cloud VM.

But running some ancient hardware not for historical reasons but taking user data, is wrong.
One of the central themes is that all content is mediated - no one reads the original work but rather commentary on commentary.

In the spirit of this I would encourage you to read the original 1909 E.M. Forster piece first before reading this piece of commentary or the replies in this thread: https://www.ele.uri.edu/faculty/vetter/Other-stuff/The-Machi...
Try Clojure, learn properly then we talk...