skysight-inc/HackerNews huggingface dataset:
Tbh I can’t even think of a place where competition solves user-friendliness—user friendly software is highly uncommon in commercial software, let alone more broadly (i’m eying you, canonical).

There are a large number of user-hostile behaviors that stretch across industries: ad-funded software, app stores pushing microtransactions, wildly inconsistent interfaces and behaviors across DOM-driven software, opt-out behavior for things like arbitrary internet access.... user unfriendliness is the default state of software and even the most user friendly software still neglects the needs of many of their potential users.

This is a fact of software built in bounded time to be resold for passive income and “support” (which means “bug explainer” and possibly “refund-giver” in most corporate cultures).
The article doesn't talk about this, but the most mind blowing thing about the "CBD craze" to me is that hemp flower is now legal in all 50 states, and despite what people will tell you ("you can't get high off hemp; it doesn't have THC; it doesn't have enough THC to get you high") it definitely can get you high. It won't get you high in the same way that Modern Engineered Marijuana (TM) will (read: it won't make you go crazy), but marijuana of the 1970's is basically legal everywhere, and you will get stoned if you smoke it.

Flower is typically tested for compliance against the psychoactive delta9-THC in most states (not in all states though), which ignores the THCA content. But THCA is converted to delta9-THC when heated/"decarboxylated", which is a pretty big loophole.

These communities [1][2] are buying ounces of weed through the mail.

A better example is probably this 17 gram edible [3]. At 0.3% d9-THC, that's a ~5mg dose of psychoactive THC per package. You can buy these all over the US in states like Texas, Oklahoma, Alabama, Mississippi, and Kentucky... Places not exactly known to be "weed friendly". See this map [4].

Pot has basically been legalized everywhere and people just don't know about it yet.

[1]: https://www.reddit.com/r/hempflowers/

[2]: https://www.reddit.com/r/CBDhempBuds/

[3]: https://lunchboxalchemycbd.com/products/full-spectrum-hemp-s...

[4]: https://lunchboxalchemy.com/cbd-retailers-cbd-squib/
"The top stories on Thursday: UK government data suggests around one in six people in London and one in 20 elsewhere in England have had coronavirus"

"With further statistical adjustments, they found about 17% of London adults had been infected; this compares to only 4.3% in the north-east of England."

https://www.bbc.co.uk/news/live/world-52749186

That's the _BBC_, perhaps the most respected news organization on the planet, and unarguably an expert on all things London. They are citing information released by the UK government: 1 in 6 Londoners. Misinformation my a--.
You might also ask 'Who regrets not choosing Elixir'.
> So those 1 in 6 know exactly how it will impact them because it already has.

It could impact them differently if they contract it again.
Weird. My mind automatically pictures this in the Drake and Distracted Boyfriend memes, which is the reverse purpose of what memes were designed for. Repetition is powerful.
>you're still very likely to infect other people and contribute to the spread

True, if you are scared then by all mean isolate yourself, do not meet other people.

>causes extra deaths

Assume, in the worse case everyone infected, the estimated death rate is only 1%, that's not going to make difference to most people life or the economy.
> I don't want a tool where I have to pay money and go through some bloody legal process to upload a video. Getting a DMCA takedown rarely is far preferable to me.

But as you describe it, just having YouTube take down your content whenever somebody complains of copyright infringement even without the DMCA would satisfy you. So if YouTube just had you sign a contract that says "if someone complains that something you posted infringes their copyright, and we have good reason to believe the complaint is legitimate, we'll take down your content and you have no legal recourse", you would be OK with that.

All of which is fine; but the DMCA means that I have to accept the same terms from YouTube, or anyone else, even if I would prefer different ones. In short, DMCA is a one size fits all solution that doesn't allow different people with different preferences to find solutions that work for them.

> Instead of trying to ruin my YouTube, why don't you go create LegalTube or something where things are like what you say.

I can't because it would be against the law. Why don't you get them to repeal the DMCA so that people can try different solutions for different needs, the way things are supposed to work?
The term used within my circles is 10x1 engineers -- they've replicated their first year of experience/learning 10 times over. Biggest thing to watch out for when hiring "senior" devs
Stan Lee, the Astonishing Mr. Marvel
Show HN: Baahu - fast 4kb state machine-based web UI framework
Not it was not the case and there was several serious issues with fsync and PG in the past: https://www.percona.com/blog/2019/02/22/postgresql-fsync-fai...

On MySQL: https://dev.mysql.com/doc/refman/8.0/en/innodb-dedicated-ser...

InnoDB uses O_DIRECT during flushing I/O, but skips the fsync() system call after each write operation.

The fsync thing is more complex than it looks like.
For healthy people it’s about as dangerous as any other cold, the data are in. Most people will simply refuse to put their lives on indefinite suspension once they discover this fact. The mass psychosis will end soon.

By the way “healthy” also means mental health, to a degree. If you’re irrationally terrified of this thing you’re not going to do as well. My prescription: Try growing the fuck up and learning to handle fear.
Generally I agree. Interacting with the email is counted as "phished" because it makes the security team look better.

The counter-argument is that if an attacker sees you interacted with the phishing attempt they may try again with a more targeted attack in the future.
xxHash64 has demonstrated 14 GB/s a while ago

https://aras-p.info/img/blog/2016-08/hash2-pc.png

And FarmHash64 with SSE4.2 did almost 18 GB/s:

https://aras-p.info/img/blog/2016-08/hash2-farmhashoptions.p...

Full article: https://aras-p.info/blog/2016/08/09/More-Hash-Function-Tests...
Sure, there's plenty of abuse. That doesn't mean there aren't plenty of legitimate notices. I don't think you can seriously tell me you don't think there's a significant amount of legitimate DMCA notices. They can't all be abusive.

You're making what amounts to a deontological challenge to the law, which I reject. The question for me is which legal framework leads to the best results. If you're not trying to answer that question but are instead trying to make sure it comports with some rule you think laws should follow, then I'm not going to be able to convince you within the framework you're working in, and vice versa. But we should understand the difference in frameworks, if that's what's really going on.

Also, all the DMCA does is create a safe harbor. It doesn't require the site to take down the content. They're free to do their own investigation and refuse to take it down, they just run the risk of being liable if they get it wrong.
Hi HN!

You can read the documentation here: https://baahu.dev/docs/introduction

You can read why I made Baahu here: https://baahu.dev/blog/2020/05/17/why-baahu

Reddit thread: https://www.reddit.com/r/javascript/comments/gozc78/baahu_43...
I use the phrase 'mild insanity' because I honestly feel that it's some element of cabin fever that's caused a minority of individuals to become paralyzed in this way.

At this point we've gone way beyond any semblance of 'flattening the curve' and gotten stuck because there was no plan to unwind the lockdown.
One can also use an exponential spread: "Is it more like 1, 10, 100, 1000, ... ?".

And do explicit bounding, with high/low confidence bounds.

"How many cats live in this neighborhood? Is it more like 1, 10, 100, 1000, and so on?" "Hard lower bound of 1 - that one over there". "Hard upper bound of 1M - we'd be tripping on a cat per sq meter". "Soft lower bound of 10 - I think it likely there are at least 2 more cats somewhere, which gets us to order 10".

In an educational setting, bounding has much nicer conversational dynamics than the much more commonly used point estimates. Instead of identity-entangled long chains of approximation, followed by "I don't like your step C", "Well, your step B is a gross underestimate". And then "oh, the answer is X, but we said something else, which we'll now arbitrarily call right/wrong and move on". Instead you can get a much more collaborative "Can anyone suggest another bound, upper or lower, hard or soft?" "Does anyone have any questions about that proposal?" "Any suggestions on resolving those questions?" "Ok, can anyone suggest another bound?" And when bounds are compared to ground truth, there's the richer followup of which bounds held. And while a soft bound blown might be bad luck, a hard bound blown means something was misunderstood, permitting fruitful failure analysis. And it's intensive "scientific dialog" practice - the discussion around each bound is another iteration.
Apple puts users before developers which is why they have such a large market share. If you can't reach their high standards, just develop for another platform. There's no need to whine on HN about it.
Sweden approach gave them a spot in the countries with the highest mortality rate per capita (so far ~376 deaths per million, versus 55 and 44 in the neighbour Finland and Norway [1][2]).

It may work out for them because it's a lowly populated country but I wouldn't try that model anywhere with an higher density.

[1] https://www.theguardian.com/world/2020/may/21/just-7-per-cen...

[2] https://www.businessinsider.com/sweden-coronavirus-per-capit...
Please go talk to a doctor who works on the ICU.
I’m primarily a C++ dev, so that colors a lot of what I think about the 3rd party library situation in Elixir. Because of the abysmal state of package management in C++, it’s usually easier to implement stuff yourself (tailored exactly to your own needs, and therefore with an extremely limited scope) than it is to bring in a heavyweight third-party library.

For that reason, I was pretty comfortable coming to Elixir and implementing Somewhat esoteric, games-specific networking stuff myself. It would have been nice if the library had already existed, but I am so glad I went with Elixir rather than Node or PHP (which both do have the game networking library I needed).

My experience has basically been that the “fat head” of open source libraries exists in Elixir, but the long tail of more esoteric stuff does not. By its nature, though, you won’t need 99% of the esoteric stuff available in other languages.
If we can get the virus contained then there is no need to stay in lockdown.

Compare with Ebola. They don't have Ebola in Europe. But if it pops up somewhere, we will contain it as soon as possible.

It doesn't mean that they need to live in isolation for the rest of time.
> We understand nothing “exactly” in this universe

Apparently a lot of "we" don't, since a number of people were saying they did the "exact" calculation that kolanos did but got a different answer.

> so maybe cool it on the fun fact witch hunt.?

The "witch hunt" seems to me to be on the part of the people who downvoted a perfectly correct and legitimate post, and those who responded to it with a claimed "exact" calculation that was wrong.
I believe Pushbullet needed it's permissions for the features it offered

The PB post describes them removing permissions they realized they didn't need, you can check their writeup. Google's handling of this was poor but PB had real problems.

In this extension's case, we haven't even seen what notices Google sent.
Except we have had medical marijuana for over a year in Oklahoma.
Au contraire. A developer with integrity will become a senior with integrity, and when you're dealing with people -- which you will be if you are not already -- you get a reputation for being fair and just. People will not deal anywhere near as favourably if you have a reputation for displaying a severe lack of integrity.
And also by non-malware Stylish fork, a thing to modify CSS in the browser: https://github.com/openstyles/stylus/
How do you manage dev vs prod instances with sequelize? Specifically, do you use migrations for your local dB or just force sync it?
I guess the Product Manager(s) from Chrome extensions at this should reply with clarity of how they are dealing with this.
FWIW, someone workin on things related to it felt like it was something that needed apologizing for: https://twitter.com/DotProto/status/1261047663669084161

Rejecting a fixed version is not lack of "hand-holding", and far-reaching permissions are not by default a "major security breach" (unless Google has a policy of shipping products with major security breaches built in?)
How MongoDB is dangerous or less consistant that PG? I have one for you: I can't use PG or MySQL because my app will go down if the master is down so then the entire backend fails. How do you do HA with default PG?
Around a quarter of cases are working age.

A non-trivial proportion of those become seriously ill for months. It's possible they're going be left with permanent health problems.

I know of one music app developer in his forties with no health issues who spent more than a month on a ventilator. He recovered - barely - but it's going to be a while before he's back to working full-time.

Nonsense about flu statistics is just ignorable whataboutery. Covid is a very nasty illness, and until a vaccine is developed it has potential to do huge direct damage.

Without lockdowns it would have spread like wildfire and a lot of people would have been off work at the same time. Some food supply chains in the US are already struggling.

Imagine what would have happened with only ten times more casualties.
Depends on the environment. SQLite will scale out reasonably well so long as it's only needed on one machine. As soon as you need a network-accessible database, traditional database servers start looking like a better option.
Thank you for trying this. It is adding to my own recent interest in resuming blogging for blogging's sake.
The USA strategy unfortunately is the re-election of the current administration, a strategy that will never have widespread support so any tactics you implement will not have widespread adoption without heavy-handed enforcement.

The countries that are dealing with the virus the best, were able to present a strategy to their population which allowed groups to create their own tactics to complement the overarching strategy.
I'm not even going to get to the point of wondering whether every component is faked or not, since my thought process will stop at "I'm not going to ever enter credentials into a site I got to from a random link in an email". Which seems to me to be a far better policy than trying to figure out whether a particular site I got to from a random link in an email is faked or not.
Show HN: How to Use the Spread Operator () In JavaScript
Ask HN: Will there be an edition of Startup School Summer 2020?
Will there be an edition of Startup School Summer 2020? Will it be open to thousands of founders as in the last summer or it is planned for a smaller group?
The issue is not wearing masks. The issue is legally mandating them.

You should wear a mask. You may be an asymptomatic carrier, and masks have fairly good odds (~90%) at stopping liquid droplet spread.

However legally mandating masks is a different problem. The state is engaging in compelled action - which is usually right out save a few cases. Just as the state can't legally mandate someone to say they support the president, the state can't mandate helpful behavior - it's just not a power the state has.

Could the state legally require condoms unless you were intending to conceive? Condoms are effective at stopping almost all std/sti, and are 99.98% effective when used properly at preventing unwanted pregnancy. We could eliminate HIV tomorrow if the state forced their usage. You should use a condom, but that isn't the same as legally mandating them.
Can you expand what you mean re: large projects in Python?
Sure, that's mission critical (ish), but it's not really what people think of when they think of Facebook. It's not millions of posts per second, ultra scalable whatever.

Disclosure: I worked at Facebook, but not in that department, or anywhere near any MongoDB.
Yes, but different states have different rules. Apparently in that guy's state, they won't take shares, only cash value of shares.
The headline suggests voting with your wallet while the article and the whistleblower appear to be suggesting stricter regulation.
Java was released 25 years ago
Please get out of my business, and stay there.
The right to use that name in a certain context.
Kik was a dick. 30k is a lot, but lawyers would’ve cost way more than that
The thing that gets you to the thing
Generally if you take the approach "what might I be doing wrong?" instead of aggressively asserting "I am doing nothing wrong!", you're able to uncover some solution on your side. I rarely ever try to deal with support because it often ends in no/poor resolutions.

I would guess there's something in this extension that looks very similar to suspicious activity (regardless of whether it is) and some light refactoring would resolve the issue of repeated flagging.

Not suggesting this is right or good, but it's probably less time consuming and more effective than emailing back and forth for two years.
There's in-progress work on supporting other sync services. Most relevantly, there's work on using a CloudKit backend[1], which would effectively be a NetNewsWire-only feed syncer service.

[1]: https://github.com/Ranchero-Software/NetNewsWire/issues/491
Mapping facial recognition around the globe
You can use a regional GCP disk that replicates over all zones in a region (https://cloud.google.com/compute/docs/disks#repds). You cannot mount the same disk to many VMs, but you can force mount the disk to a new VM.
People who are spreading ebola tend to be bleeding from their eyeballs. Covid can be spread widely by someone with no symptoms. The transmission of the two viruses are so different that comparing them is extremely misleading.
I would never try to build a business on either app store but even if you target the web you can't afford to ignore Apple, at least not in the U.S. On my last project Apple/iOS users made up half of our revenue.

Unfortunately this means it's hard to be a web developer these days without owning Apple hardware.
I'm not sure how this would work legally with employment contracts, but it would be worth it to get your employees hired at Google so they can professionally execute that role for you. We have joked before about not poaching friends from Google since they are more valuable working there than at your company.
That Office AC System Is Great – At Recirculating Viruses
So how do you feel about speed limits then? Do you just go ahead and break the speed limit every chance you can get, because it's legally required to follow them?
More than 3 years. They've been they sat around since Bulldozer because the gap was so large, and have failed to maintain their dominance.
It's not dangerous at all. The US already has helmet laws for motorcycles and kids on bikes, seatbelt laws, gun laws around safe use and numerous other laws that prevent people from inadvertently affecting others lives.

Making people wear masks in public transport or other public settings during a pandemic is hardly an overreach in comparison.
yeah, that is what refresh tokens are used for and it works well for access tokens with a short ttl. in practice i have seen access tokens with ttl of a few hours. i think it might be done to cut down on the refresh calls? in that case, if you want to deny requests with a revoked token sooner than the potentially few hours it takes for it to expire, you could keep the set of revoked tokens server side.

that feels like a weird place to be in with server side state for stuff that is supposed to be stateless. i guess the revoked set is smaller than the full set of active tokens so maybe that is a win? curious if anyone has experience with this.
It is actually a very known problem for gene therapies. IIRC, similar vectors were used in the past, with the same problem, of course.
There's no black magic here. Everything you see here can be found by running the profiler and reading the docs. I haven't been a Mac developer nearly as long as he has, and almost all of these are things that I do.
> Norovirus kills 200,000 people every year

That's true, but it kills very few people in the developed world. Deaths from norovirus are mostly a result of inadequate treatment, and/or lack of detection.

And, frankly, if covid was only going to kill 200k people, we probably wouldn't be closing anything much. It has already killed almost 350k people, and that's _with_ most countries imposing variously draconian measures.
Should be "Apple's iCloud Photos web app doesn't accept HEIC photos uploaded from iPhone."

The non-web Photos apps work fine with HEIC images.
Yep. The days where I have to slog through 8 hours of crap are still productive. It’s just not the fun kind.
For what it's worth, I have _never_ had good luck with "big vendor" software (like Adobe) and using any sort of synced cloud-based filestore. I have had untold issues with things and as soon as I moved files local, everything magically went away. Might try that!
From malwarebytes:
"Spyware. Although it sounds like a James Bond gadget, it’s actually a type of malware that infects your PC or mobile device and gathers information about you, including the sites you visit, the things you download, your usernames and passwords, payment information, and the emails you send and receive."

Yep, Google is certainly protecting us from companies that do that.
"Javascript" though isn't Javascript. I mean it could be, but it's worthless in that context because what you actually need to be productive is familiarity with the browser DOM, current frameworks for frontend or backend, and basic project structures.

For Java it might be enterprise Java, it might be Android, in which case you need familiarity with those frameworks to be productive. For Swift it'll be iOS.

No one's "diving into" the codebase for an iOS app starting from "I mostly do backend web app development in Golang".

Are you an "expert" in all those things? I doubt it. In fact the worst possible thing you can generally write anywhere is that you're an expert in C++ which at this point is oh-so-many subdialects.
Does Bilingualism Make You Smarter?
Same. I particularly like Linux Libertine, enough so that I make Firefox use it everywhere, even (especially?) where the page designer wanted sans.

Sadly, mobile Firefox does not support that, so HN on Android is relentlessly sans.
> Glossing over credits so content creators don't get credit.

FWIW, Netflix gives the producer of the content the choice on whether that happens or not. So it's the producers who are actually choosing to skip the credits, not Netflix. Netflix just gives the option.

> Monopolistic practiced with regard to tethering content creation and content distribution together.

Netflix would rather not do that. Remember, they started as a DVD service. The nice thing was that because of Fair Use, they could have any movie the want on the service. If streaming worked the same way, and they could just buy "retail" copies of movies and stream them, they would be much happier.

They only shifted to the content creation model because they had to, because it was cheaper than licensing someone else's content.
As someone who makes a living off cross platform IAPs, your ignorance is quite amusing. iOS users spend way more than android users, to the point that if we had to drop one it would be android.
Some versions of netcat have no way of closing the connection when the file is finished transferring. You just have to wait long enough and then hit control+c.