skysight-inc/HackerNews huggingface dataset:
Hate to break it to the author, but npm has been a raging dumpster-fire for over 4 years now. My personal advice on how to live with it:

- Assume you will have to rewrite your app in a year or less from now and organize it as such. This won't be easy when dealing with release deadlines which result in all-nighters full of sphagetti code. Whether you're doing react, vue or angular, just keep your components and logic small and if you need a package, (say for handling CSVs) then look for one that promotes itself as having no dependencies. Keep in mind that while re-writes can be a taboo subject to many managers, they can actually be the fastest way to solve deep dependency issues.

- Unless your framework requires it, try not to lock your package versions, this is a very common bad practice in my opinion. ```npm audit``` is your new best friend, make updating to latest part of every sprint. If you're just 3-4 months out of date these days you're likely to have over 40 security vulnerabilities. If you're 6 months out of date on a public facing application and need to pass a security audit, you're not gonna pass it. Compliance requirements, like SOC2 or healthcare ones are getting a lot more thorough as well. It's a lot less work to update continuously.

-Secure your devops. Any npm package that runs has full acess to your entire disk and network I/O.
The cheapest way to harden security is to move your devops to aws or gcp. They can afford to audit their networks and OSes a lot more often than you can.
If you're doing it alone or on a very small team, i'd recommend trying out aws-amplify or firebase hosting on gcp.

-If you're doing node on the backend, go full typescript. I think it's easier to adopt a "strongly typed" mentality when your logic is clearly defined. If you don't feel confident in your use of typescript, then don't use it in the front end. You're gonna have a bad time, especially with state management in React. However it is getting more mature and package managers are learning to avoid type issues too when updating their methods.

- And last, when picking a new framework or boilerplate or package, run npm audit on it first then make sure to read up on their github issues as much as you possibly can. It's very important to get not just a technical feel but a social one too on how their devs react to their issues.
My take on it is this: The more layers removed an average voter is from an election, the more anti-democratic. Voting for MPs who vote for EU parliament representatives who vote for commission members is too far for me.

One effect of this: elites always vote for other elites. There have definitely been many MPs who come from a working-class background, but that is impossible in the EU because normal voters aren't able to put those people in power.

Basically, if I (or the other common man) do not have a direct vote on someone in power, then we are in an anti-democratic system.
I think part of the reason is better schools are more selective and assume better students that will be able to pick up the shifting practice easier while the theory may last a lifetime for them. Needless to say the assumptions may not always hold.
It's just a further example of the software / online experience being so...fluctuating as a whole. Which has its pros and cons. Pros being freedom of visual and interactive expression. Cons being lack of expectation.
Write tweets ;)
A better question is if a criminal shoots at you, can you fire back? Essential how much grown must you give in either scenarios so that you remain principled?
Instead of trying to derive the reason for the suppression of LGBT content on YouTube from first principles or hunches, maybe you should dig into the evidence first.

https://www.theverge.com/platform/amp/2018/6/4/17424472/yout...

https://www.washingtonpost.com/technology/2019/08/14/youtube...

https://www.rollingstone.com/culture/culture-features/lgbtq-...
> How so?

Consider a group of Neo-Nazis that want to stage a peaceful protest espousing their ideology. They get their permits and set out in a town square, chanting all kinds of anti-Semitic and white power nonsense. The question "are the Neo-Nazis being intolerant?" is a tricky one. On one hand, the answer is a resounding "yes," but on the other, they're the proverbial dog that's all bark and no bite.

Consider some local Jewish group that wants to stage a counter-protest. I'll give you the same question: are the Jewish protesters being intolerant? Again, it's a tricky one: they might argue they're being intolerant of the Neo-Nazis' intolerance (as I'm sure Popper would say).

The Neo-Nazis could, in turn, argue that they aren't being intolerant at all - they're just exercising their First Amendment rights. In fact, it's the Jewish counter-protesters that are the ones being intolerant! So we're just going around in circles debating who's being "intolerant," what "intolerant" means, and what it takes to go from "tolerant" to "intolerant" -- the classic sorites paradox[1]. This is all equivocation.

When we look at simpler tests like Mill's Harm Principle, the problem is simplified! If, the Neo-Nazis aren't harming anyone, they're free to do whatever they please -- as are the Jewish counter-protesters. Harm is a lot easier to wrap one's head around than "tolerance," so that's why I think it's a much more palatable litmus test.

[1] https://plato.stanford.edu/entries/sorites-paradox/
Other than renting a car or a hotel room, it seems you can conduct most if not all of your affairs without a credit card. Credit cards can be relegated to those limited transactions.
>I wonder if you could do even better by putting paint or ink on the outside of the tire, driving over a piece of paper, and seeing what fraction of the paper touched your tire.

Yes you can. It's called "chalking" tires and is commonly used to figure out what pressure achieves optimal contact patch.
Division by Zero (story)
I've seen stores (e.g. electronic stores) offer reduced prices when paying in cash vs. credit card. Is this law only in the US?
Something I learned a decade ago was that facts often don’t change people’s mind.

Before I learned that, I would try to change other people’s views with facts. Now, I don’t try so hard since I know it won’t make any difference. Love the conspiracy believer for their other qualities and ignore their crazy ideas.
I think that a lot of ideas here are really good, but they shouldn't be implemented in npm. Npm is not meant to be curated. NPM is meant to be a canonical way to reference a dependency, and that's about it.

I don't think it's NPMs role to assign "quality" to a package (even though ironically they have a quality metric) -- that's something a third-party should do on top of npm.

That's the unix philosophy in me speaking.
Apple is not in the user data business.
I like this forum to not be filled with propaganda and conspiracy theories, especially those that completely absolve the actual culprits of their crimes. Another poster defended the original post and claimed that Marxists are the reason for the decline of America.

That's essentially propaganda and an unfounded conspiracy theory with no backing. And it conveniently creates an "other" to hate even as you completely forget that America's decline started the day it decided to spend trillions in Iraq and Afghanistan, followed by trillions more on bailouts in 2008.

Dick Cheney and Wall Street would find that very convenient!
Politicians ignore far-out risks
I think you're missing the point.

Part of the problem is that android is an "other platform" in the first place. Sign in with apple is supposed to be a cross platform feature, but Apple can't be bothered to even write out some decent documentation for a platform with over 2 billion devices. Compare, for example, the Google sign in for iOS[1]. They provide a working example project and full documentation.

If you are a developer supporting a cross platform app, you're not getting much help from Apple. That's what the article is saying: integrating this feature is going to be more work and more risk than it's worth. That's the point.

> It just means there's plenty of room for third parties like indie bloggers to documentation their own approaches in JavaScript, Python, Ruby, Rust, or whatever.

We are talking about signing in. This is one of the most fundamental features you need to have. This is not something that you just copy paste from some half baked blog post. It is amazing to me you think that's acceptable.

[1] https://developers.google.com/identity/sign-in/ios/start
Well, that's another app I won't be using.
Few months ago I made a friendly bet with my American coworkers that 2020, 2024 or 2028 elections will see a non-Democrat, non-Republican president being elected. Bi-partisanism is so entrenched in American views of politics that American seem to have forgotten that it's quite accidental: most democracies around the world have way more than 2 dominating parties. Sure, the election system in the US makes it quite a bit harder to have more than two parties, but...

Americans are so conditionned by bi-partisanism that most will be surprised when it happens. But it will happen. You are not alone in thinking that both Republicans and Democrats have lost their ways. After 5 years spent in the US (in NYC) I would even say that you are, in fact, the majority.
Anecdote, obviously, but I know just too many conservatives who can't (and don't) support the Republican party anymore.
Interesting. I’ve never signed into iCloud on my Windows PC so tbh the thought that’s how it worked never crossed my mind!

I’ve also never come across a “sign in with Apple” button on Windows. Not sure I’ve seen it on iOS either...
> It's not okay to allow "the front page of the internet" to exist in stark opposition to the free speech values (a) that it started with and (b) of the country it is incorporated in.

It doesn't matter what it started with. Companies change all the time. So what? It's private property, they could shut all the servers down and replace it with something completely different.

Why should an owner be punished because he decides he doesn't want certain content on his website? That is principally un-American - the right to private property is equal, if not greater, than the right to freedom of speech.

You can't force a printing press, or Reddit, to allow certain speech - because this, paradoxically, is also a violation of ITS free speech.
What about vendor lock-in? Apple forced many apps on the App Store to use Sign In with Apple for increased “convenience” but it also makes it very inconvenient for people to switch to Android.
Hey, I think I've fixed it. Want to try again?
The real question is will the glasses have hand recognition and mixed reality like experience of the Hololens 2. If it ain't that good, I won't consider buying "smart" glasses.

If you haven't experienced the HL2 it's other worldly, such a better way to interact with the digital world. Worth every penny!
Just curious why PayPal or Venmo?
You're literally grouping all dark skin individuals into a group saying they share the same heritage and culture when they don't.
A quick Google search turned up http://hdl.handle.net/10919/98593.
Every time I pay for something in cash at a store, I’m paying for those 2-5% rewards, even though I won’t partake in them. This happens because the credit card companies, by dint of their crushing market power over small retailers, can force stores to charge identical cash and credit prices. I suppose a well-functioning competitive market would fix this problem, but weirdly enough Amex and Discover don’t seem interested on competing to offer a better deal to retailers.

Credit card fees and rebates are such an amazing example of how systems can fool human beings. The entire system clearly could not exist in a frictionless, well-functioning marketplace —- but people seem hard pressed to actually figure out how the whole thing works. It’s kind of brilliant.
It used to be true that during a Facebook Connect session the user was asked if they wanted to share their email or not. I faintly remember you could even choose a proxy fb e-mail aka "fake email". Did they remove that feature?
Could very well be the case, however, they are at some level affecting the safety and well being of the population. E.g. see what happened to Bret Weinstein simply for refusing to be part of mass hysteria.
Funny, I take the opposite conclusion - figuring out a widely held opinion is wrong is not easy, therefore I think we should be slower to condemn people who get contrarian bets wrong.

To extend your metaphor, if I invest in a bad company, sure, my finances will suffer. But if it were that easy to tell which companies were bad there'd be no reason to invest at all. People who bet against the crowd and are right are generally considered heroes. I agree there should be a cost to trying to be a hero, but I don't think we currently have enough of them and I'm leery of making it harder to be one.
I wonder how much more expensive credit cards actually are? Cash costs money/time to handle and deposit, it's easily stolen, and easy to commit fraud with (like the classic move where a drive thru employee pockets the cash from a sale without ringing it up)
I don't doubt at all that TikTok is super shady, but

> I'm getting a lot of DM's asking me to prove the majority of this with a paper and snippets of the offending code. I have a decent amount of my notes on my other laptop that recently had a motherboard failure and the majority of that data is on the laptop's SSD. It's a macbook pro, so recovering the data isn't exactly super simple. I have some frida scripts that I pushed to my git server as well as some markdown files + conversation logs I've had with exploit devs, but not much else. In order to get everyone the proof they require, I'll likely need to reverse the app all over again which isn't something I have time for right now.

Just sounds like "my dog at my homework".
> The first thing I wanted to do with my Saab 96 was to establish a baseline weight. The cheapest scales used for racing are over $700,

You can do this for (almost) free if you go to the local dump. They usually charge you based on weight of what you dump by weighing your car on the way in and on the way out.

Just ask them what the reading is on the way out. If you bring a couple of pounds of garbage, it will cost a few dollars at most.
Sign In with Apple works a lot like Sign In with Google or Facebook. There's no reason it can't be used on Android also.

https://github.com/willowtreeapps/sign-in-with-apple-button-...
I’m confused, first job out of undergrad vs first job out of a PhD is going to have a massive salary difference in any field and from any two decent schools. What am I missing?
Yes, that's mentioned in the article:

> if there are platforms where AnyList doesn’t support Sign in with Apple, like Android, and someone wants to log into their account, they’d have to know their privaterelay.appleid.com email address.
Just out of curiosity, How does rust prevent the Gentoo issue of: you can compile with custom flags, but most projects have only been tested with specific flags and if you change them they will break the build, so really, no customer flags. It always starts off with custom flags and ends up ossifying to the default-only flags.
> I’m paying for those 2-5% rewards

Well.. you're paying a 2-5% higher price, but the merchant gets to keep all of that; it's not as if they have to also pay that fraction into their transaction processor.

> I suppose a well-functioning competitive market

You ever see retailers that offer a discount card? Like, spend $50 here get $10 off in the future? Typically they'll only offer those for cash transactions. This is why.
I'm replying to the parent, so the article could be called:

Regular Expression Denial of Service Can be Avoided by Using Regular Languages

In other words, accepting regular expressions / regexes exposes you to a DoS. Accepting regular languages does not (as long as you're using an appropriate engine.)
Obfuscation of the email address is an explicit choice by the user when using Sign in with Apple. It’s not something forced by the service. If users are choosing to do that, it says something about the lack of trust the users have with whatever they’re signing up for.
The logic you've provided says nothing about whether we should condemn Alex Jones, so I'm not clear what point you're trying to make. Unless you think we should be slow to condemn people who arrange for the harassment of parents whose children were murdered by a gunman in their elementary school. But that seems like an implausibly villainous thing for anyone on HN to believe.
That is why my mom and my grandma use "sign in with facebook".

But if you have a Password Manager, then it is literally a single signon solution in and of itself, without the sacrifice of privacy.
Sure, I'll bite. Even though I take issue with all of these as they're more-or-less a form of lying, these two stand out:

> selling goods with a high markup is scummy

> selling cheap goods with a high markup is scummy

The latter one especially takes the cake. When you resell a $2 item for $100, you imply that your contribution as a middle-man is worth $98. The other items on the list (which effectively amount to marketing tactics) essentially act as a way to convince (or, more accurately, take advantage of) consumers that your product is not actually worth $2.

Here's a great way to reformulate the morality of the matter in your mind: if you knew that all you were buying were $2 plastic sunglasses from China trussed up with European brand name to look high-end and high-quality, would you still be happy spending $100?
I'm raging at anyone who is supporting the covid lockdown right now. USCIS was closed for over 3 months and just now opened up for "emergencies". We can argue later about how incredibly incompetent that agency is but for now I'm just insanely pissed at all your lockdown supporters.

Now 70% of their workforce is getting fired (let's be real they aren't bringing them back).

All these pro-lockdown people think there are no consequences here - you are quite literally ripping families apart - MINE INCLUDED.

Not a single day goes by on my linkedin where I don't see another H1 that was in a layoff as well. They're not going to get shit. USCIS is being used as a political weapon because you all are embracing this lockdown shit.

Stop pretending lockdowns are a good thing and I will smack the shit out of the next person that tells me to wear a mask.
I think a lot of people honestly don't know about them. I've met a lot of people (JS devs) who didn't know about fs, child_process, etc.

Which is a shame. child_process + promises (and a couple of listeners) is really handy for orchestrating things in scripts.

I don't really do much web dev these days, but JS is really convenient for these sorts of things. I still use it for a lot of scripts.
Groovy seems to get an awfully bad rap from Jenkins. Seems about 95% of people encounter it there in a broken state and assume the language itself is that bad. I really wonder why they have deployed it in such a way as presumably a build server can do pretty much anything so why it would be necessary to constrain groovy scripts behavior I can't understand.
Correct me if I'm wrong, but they've never found a treatment for the flu, right? You get it, you tough it out. At least I've never been cured of a flu, despite many, many flu shots.
Spend his whole life being taught about white privilege and is never allowed to say that he understands so he has to get re-educated all the time. If he says he has already heard it before and understands then he is obviously a racist Nazi Trump supporter and must violently be re-educated about his white privilege.
1. The 2006 Postal Accountability and Enhancement Act (PAEA) had bipartisan support and was sponsored by two Democrats. It was not a Bush conspiracy.

2. It included a 10 year prepayment period. This ended in 2016. It is 2020. Current USPS financial woes have nothing to do with that act. We are now in the follow-on period in which the USPS is intended to be amortizing its remaining unfunded liability over 40 years, to 2056. And this 40 year amortization period is exactly the same length of time as private-sector employers are given.

3. The USPS gets ~$18 billion in taxpayer funding/subsidies annually.

https://fortune.com/2015/03/27/us-postal-service/
We can respect another nation’s sovereignty without respecting their authoritarianism. I very much believe we should be disrespecting the hell out of authoritarian States, much more than we do so now because authoritarianism doesn’t stop at the borders, it stops at the practical limit that a State can enforce its laws which is why when the NBA was quite literally kowtowing to the PRC, we had a problem with that.

PRC corporations have a history of behaving in a mistrustful manner, combined with their obligations to the PRC State which treats its citizens as subjects, and sometimes not even its citizens, but anybody of Chinese descent, PRC corporations absolutely should be singled out and treated with mistrust. Our corporations have the obligation to turn a profit for their shareholders and sometimes that even means entering into a contract with the government, but theirs also have the obligation to advance the interests of the State. Dual mandates, even when not initially at odds with each other, often eventually come into conflict with each other, and State-owned or controlled corporations often don’t even have the profit incentive but are instead subject to politics. See also: the American corporations Fannie Mae and Freddie Mac for examples of why they’re a bad idea, although their enterprises are domestic.

This is off topic but since you brought it up, we’re not the free speech absolutists that we believe we are. What we took issue with specifically was the idea of a central government regulating speech, assembly, the press and the establishment of churches. We still had established churches for quite some time, but they were governed by the States, not the United States. Let me quote you the First Amendment:

> Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances.

Everything you really need to know is in the first five words. It’s a prohibition on Congress, not a grant of rights, and this would later come to be incorporated against the States as well such that their legislatures have the same restrictions. The reason this amendment exists at all was 1. To quell dissent from the Anti-Federalists which campaigned against the Constitution in the ratification conventions and 2. Because then and now, we’re a nation of dissenters. Many of the people that migrated from Europe to the United States were religious dissenters or penal colonists living in exile. I don’t know to what degree you studied the Huguenots in French history, but they made a few attempts to establish themselves, each time French politics seeking their resupply attempts after the initial landing, before receiving a land grant in what is now Brooklyn, and then was part of the New Netherlands.
I usually uninstall apps with a 1-star review if they provide zero functionality until you provide your email address.

Apps and devices serve me, not the other way around.