skysight-inc/HackerNews huggingface dataset:
Cancer _is_ causing 200 9/11s every day, and people are freaked out by it. That's why we spend billions on cancer research every year. And if we could prevent cancer by simple changes to our lifestyle by wearing masks and social distancing, you can bet that most people (not all) would support it and look at people who don't with disgust.

I disagree with your trivialization of these deaths. I unironically presume that you have little empathy for individual deaths due to gun violence, accidents, and other tragedies, since those are even smaller in scope than the enormous number of people who die of cancer on a regular basis.

Edit: I also fell into the trap of not questioning your assumptions. 600k a year is 1,643 per day. So a 9/11 every two days. Closer to COVID in numbers than you presented. Still horrible. I stand by the rest of my post.
> Who around here (who is also actually qualified enough, that mozilla would want them) would switch over, taking a 50% pay cut over their current pay, right now?

I think among the engineers you'll find a bunch of qualified people for that job.

Speaking from some personal experience at another company (a small one, 20-30 people).

Execs good at giving a good impression, and making money for themselves.

Presidents good at winning the elections.

But that's a bit unrelated to being good for the company. Or the people in the country.

I think/guess that some altruistically motivated engineers could save Mozilla and Firefox if they got to replace the current execs.
Wake up. You can done more.
Neither is a fair comparison, those team leaders don't need to manage all the other aspects of a company like Mozilla does.
I wonder how the 'market' rate was estimated. Was it compared to other non-profit org, or just picked some random SV ones?
The VPN service was created to make money, not to spend it. They've been fishing for a new source of income for a long time, so far without much success. Pocket brings in some money but it can't sustain Firefox development on its own.
> nothing compile without nightly

Have you ever compiled ripgrep?
Well then be tolerant towards those who open the doorway to a totalitarian society. Period.

See the paradox kicking in?
Fred should learn how to squeeze in his refactorings into other, related tickets. And to learn how to argue about why an user story is more points worth, without explicitly saying the R word.
A fundraiser to support victims of violent repressions in Belarus
I just started an ML course, and while I've been a developer for about a decade I've never used Python professionally. This will be a great help!
The Science Cops Use to Decide If You’re Lying
Yeah, for example I have an open PR in differential dataflow to make some changes to avoid a planned break in the future.

https://github.com/TimelyDataflow/differential-dataflow/pull...

I think they are doing the right thing with the break (it adds something I've wanted) but at the same time it's another break.
Indeed: it's frustrating that we were legally obligated to offer a cash alternative. It would have been cool to send someone into space regardless of any other benefits, real or imagined.

Anyway, I wasn't involved at all, so you have to understand that this is my personal viewpoint and not the view of the company but, again, the idea was that the recognition from that contest would translate into additional sales of our tools.

It didn't work.
> But are there really enough people to fund something as big as Mozilla?

I believe so. My favorite example is JetBrains. They're making about half of what Mozilla is Making (if you include the other commercial competitors, it's much probably closer, and they're competing with Microsoft giving a free IDE away), people are happy to pay. JetBrains' products are significantly better than the free alternatives though.
I recall at the time it was first proposed, Elon Musk said 0.1kPa which agrees with another comment stating 1 millibar. At the time, criticism comparing it to the old vactrain idea was dismissed as "but this tube is not fully evacuated". But it's about the same value that was proposed by vactrain, and is 99.9% evacuated.
> but that phrase is so often used to describe how people predicted something

That's really the only thing it means. It certainly doesn't mean "why did we never see it happening" (those words mean that) or "why didn't we identify the perpetrator".

Edit: for example I saw the downvote coming, because some people here love downvoting simple factual statements, but I don't know who did it, because why would they want to admit it.
What's there really to improve? I don't think the experience with Firefox is fundamentally different, nor could it be made fundamentally better. It's a browser. People don't care about browsers, they care about websites. Even if Firefox were to implement some fancy feature, websites aren't going to adopt it until Chrome has it too.

Sure, you could argue that Firefox doesn't track you like Chrome does. That's basically their whole marketing message. People who care about this already use Firefox, the rest just doesn't care.
>Avoiding the biochemistry details, vitamin D is produced exposing skin to 280-315 nm (short UVB) radiation.

Could we then just have a bracelet that had a diode that emits that specific wavelength of light and that way have our body constantly produce vitamin D?
In this case Sony is the user and they care very much that they can freely change the compiler as needed without having to ask someone else for permission. Price is a secondary consideration here.

Benefits of strong copyleft or BSD-style copyright is another matter of discussion.
As this is part of the every-day workflow, I will think long and hard on how to make it as painless and user-friendly as possible. Having a more user-friendly experience on the command-line is one of the project goals, and it will also be me benefiting from it so the motivation will be high to achieve it.
By then, that thinking process will hopefully be public enough to allow more people to chime in and get a better result that way.
And yes, I think a lot is possible, and I can't wait to test some ideas of mine :)
Go has much bigger backing that Rust. And most of that server software comes directly from Google or their ecosystem: Kubernetes, Kubernetes appendages, "Cloud Native" stuff.

And Swift is only relevant because it's the only modern, officially sanctioned, systems software programming language on 2 platforms: Mac OS and iOS (especially iOS). I know of 0 people who use or have a desire to use it outside of MacOS or iOS.

Time will tell, but Microsoft, Amazon, etc. have adopted Rust. And if you look at what they're doing with it, it is generally much lower level than Go or Swift stuff. It's directly in the C/C++ domain.
> I disagree with your trivialization of these deaths. I unironically presume that you have little empathy for individual deaths due to gun violence, accidents, and other tragedies, since those are even smaller in scope than the enormous number of people who die of cancer on a regular basis.

I literally “trivialized” nothing. Promoting the use of emotionally neutral language is not “trivialization.” Furthermore, the assumption that I “have little empathy for individual deaths” because I promote emotionally neutral language is both parody and shameful. Thank you for further proving my point.
The problem with open source is not that the source is available, that you can modify it to your own needs, or that you can contribute back, it is that anyone can redistribute your software for free, and that you can't discriminate between e.g. small businesses or personal use and Google in your license terms. This cuts off the possibility of actually supporting yourself financially as an open source developer in many cases and is an ideological commitment that mostly benefits large corporations at the expense of individual developers.
How to find experienced React Native developers
That operation is much faster in recent versions of Git, especially after a GC or “git commit-graph write” command.
> Rust is anything but easy and simple like Go language.

Rust sure isn't "simple" for anyone, but if you are a C/C++ developer, I'd definitely expect someone who's been writing C code for more than a few years to be able to pick up basic Rust in a few weeks.

Instead of being threatened by other languages and rationalizing why it's not worth picking up, why not spend a few weeks on it so you can have an informed opinion on why it's good or bad?

No language is perfect, everybody knows that. Rust isn't for every use case just like C, PHP or Python isn't for every use case -- but knowing a little bit about all of them means you'll be a better programmer in the end, because you can recognize what tool fits best for the job.
If you only have a few VMs, consider ditching swarm and just using docker (with compose) with host mode networking. I’m not sure swarm ever got stable enough to use in prod; I migrated our stuff from swarm to k8s a couple years ago due to similar issues. K8s has been solid but it’s a beast.

For storage, why not just mount host dirs into the container for stuff you want to persist? Then you’re no worse off than you were before.
I downplayed nothing. You have further proved my point.
If you had an employee sitting outside your office literally just saying all day to anyone walking by, my boss is a "effing <insert-racist-or-homophobic-slur>" would you allow them to continue working there? If not, are you not totalitarian?
OP having these skills now means more free time in University or easier time finding first dev jobs which will pay off in the future. Compound interest and all that.
How to safeguard your home from fire?
No problem, 2.5G was mentioned as an acceptable value for experienced acceleration. Do you like roller coasters?
I disagree, Kubernetes is becoming a default choice. Small companies still want declarative config, load balancing and zero downtime deployments. It is so easy now to spin up a managed cluster and deploy an app, the complexity argument has been well addressed by the community and vendors
Okay so you're still using Cloud service but with a different layer of abstraction. It's not the same as on-prem Bare metal which usually people refer to as "not using cloud"
Well, I have something like HN running on https://handlr.sapico.me ( automatically imports rss feeds)

Wich had a lot of spammers and they worked around the Google Human verification script for logging in.

Humans won't add a Title + Url + text since it shouldn't be used this way.

So ... that flow now returns a xml bomb.

Spam stopped immediately after deploying this. I'm a bit curious how long they spend looking why the memory of their server suddenly went through the roof :p
And then the footer says:

"If you like this page, why not donate a little bit of money to help me pay my bills and create more free content?"

To live like you teach would make the article a "pay-wall, didn't read" for me, seems we're in a catch 22?
you have never made an overwriting change that broke your system in a way that made rollback difficult?
From my reading of the history of these kind of organisations, I think what’s happening is twofold - firstly, that they’re often looking at the wrong people/groups, and secondly, just so much intelligence they have just ends up being wrong or misleading.

Their mission has become “collect it all”, but I think they (and a lot of commentators and even everyday people) can’t really imagine what a large percentage of intelligence is useless noise, deliberately wrong (such as counterintelligence but they don’t realise), just plain wrong (like most intel gathered from torture - people will say literally anything they think you want to hear), correct but misinterpreted, etc.. And it’s extremely hard to meaningfully sort through that much information. I expect they do expend a lot of effort trying to combat this, but historically I don’t believe they’re very good at it, and I’m sceptical machine learning and things like that is really going to help that much.

And then just watching the wrong people. Take the Boston bombing, for instance. There are reports that the key focus of groups like the DHS at the time in that area were the Occupy Boston protests, so the bombing happened even though the FBI had been tipped off about one of the bombers from Russian intelligence services. Then things like the NZ mosque attack, where this far-right wing white supremacist came from Australia and murdered a bunch of people. At the time, the media where I am in Australia was reporting FUD campaigns from Australian security agencies about ISIS and Islamic terrorism, radicalisation etc., so I imagine that’s where the focus was and he slipped through.

This goes way back throughout history. Just think of the massive amount of wasted resources surveilling suspected “communists and homosexuals” back in the day. Here they had agents actually infiltrating university communist groups. The groups got up to extremely dangerous things like going to protests - great use of millions of dollars of surveillance...
Society of Creative Achronims (SoCA) ?
Call me pro tesla if you will but I think you're underestimating the influence Tesla has had and is having on the whole planet. Few years ago they were a ridicule curiosity. Now electric vehicles are everywhere, trucks are on the way.
Over-abstraction also has a non-negligeable cost.
I normally just report those sites on https://safebrowsing.google.com/safebrowsing/report_phish/ and it doesn't normally take long to end up with a phishing warning when you navigate to it with a modern browser.

I also try to send an email to the registrar "abuse" email to let them know that a specific domain is hosting a phishing page (with the exact link as proof). That takes it down quickly as well, which forces the website owner to do some remediation.
Not opposed to vaccines. Opposed to rushed, poorly tested, politicized pharmaceuticals. Poorly tested drugs have severe consequences. Just because you WANT a miracle, doesn't mean the first person offering one will actually help.
> For a Linux distro, I suspect some people will go crazy if the fix for a security vuln of a small piece of code ends up downloading hundreds of MB [...].

I always wondered about this problem; you could distribute the .o/.a's the same way you currently distribute the .so's, and integrate the linker with the package manager. This theoretically seems to share most of the benefits of both static and dynamic linking: push complexity away from the kernel/dynamic loader, smaller updates = easier patching (compared to fully static binaries), etc. And it works for closed source.

OpenBSD does something similar already for libc and kernel (for boot-time address layout randomisation) and it works great.
> Small company gives away software for free.

A company employing ~1000 people, with $500m+ revenue, is not a small company. It's not even mid-sized. This is a large multinational, only seeming small when compared with FAANG.
Yeah, ride hailing, those scooter companies, Wag, WeWork, a huge amount of smart city projects (although they generally fail to even get to stage 4). Theranos is a great example - literally running into the laws of physics.
Honestly, no matter how you interpret the sentence, the article is so blatantly not about whether you thought the NSA was hacking companies, it was why the security community failed to concretely detect it.

All of the talk of how some people on HN totally for real knew the NSA was hacking people is irrelevant and a total distraction from the far more interesting question of why we needed a leaker to confirm it.
North Korean Hacking Group Attacks Israeli Defense Industry
On Becoming an Internet Savant
> very naive view

Yes, I think so too.

The more money that gets involved, the more this'll attract people who care about money, not the mission.

I'd expect execs at bigger companies to be less good execs, but better at office politics and impressions.
> And quite expectably, stock prices inflate at larger rates than the prices of other goods.

Actually stock prices grow slower than in 1981-89 and 1991-2000 (though a bit faster than 2001-07): https://www.macrotrends.net/2324/sp-500-historical-chart-dat...

Edit: Stocks appreciated faster than consumer prices inflated, over pretty much the whole period.
Sweden’s Economy Is Doing Way Better Than the Rest of the EU
If your container builds are slow you are doing something wrong. You need to restructure your builds so that you get better layer caching. One of the primary reasons we switched to containers in the first place was because it allowed us to quickly and repeatably build complicated infrastructure and share the prebuilt artifacts while also speeding up rebuilds.

As for dealing with runtime issues/hot fixes, put something like supervisor in your containers that might need temporary interventions in production and use that to restart the service without having to restart the container.
A stated goal is

> a simple command-line interface is provided for the most common git operations, optimized for user experience. A simple-git if you so will.

But an explicit non-goal is

> replicate git command functionality perfectly
git is git, and there is no reason to not use it. Our path is the one of simplicity to make getting started with git easy.
a simple command-line interface is provided for the most common git operations, optimized for user experience. A simple-git if you so will.

So it depends. They may refine some parts of the UX, others may be identical, and other still will be left unimplemented because git still exists.
> If you need a hot fix "RIGHT NOW" you might be doing something wrong in the first place.

Maybe I phrased this point badly. I haven't found myself to need a hot fix RIGHT NOW for a long time. What I had in mind was this: sometimes there is an issue that is very hard to reproduce locally. If a developer doesn't understand it from the get go and have to experiment a bit, it can be frustrating to commit, wait for deploy (even to stage environment), test what happens and repeat.

> Not sure what you mean with lingering containers. Do you launch yours through SSH manually?

Of course the application itself is run automatically, web server, workers, etc.

However, we often need to do some bespoke data analysis, so we often ssh into a server, type `make shell` to launch a REPL and type/paste some stuff into it.
> If the NSA was owning everything in sight (and by all accounts they have) then how is it that nobody ever spotted them

I think this should rather say "nobody ever came forward". I'm sure there always were enough pieces of evidence even if scattered and nobody had the whole picture. But the ones who were close enough to put together some of it and get an idea had no incentive to open their mouths.

Coming forward with enough evidence was likely close to impossible until a decade or two ago. The ones who have such comprehensive evidence also have some "incentive" to keep quiet. Up to the proverbial "terminated with extreme prejudice" option, which I'm sure must have been employed given the sensitivity of the topic. Or perhaps risking being labelled a terrorist which would likely lead to even worse outcomes. When the efforts were escalated after 9/11 so were the security measures and the "incentives".

And coming forward with just shreds of evidence of something like this will only get you labelled a nut, enemy of the state, shill, etc.

Snowden and a few others did it at great personal cost and I'm sure they now serve as an example for others to not do it. Look around even today, people see the world in black and white and if you're not with them, you're against them, and they will treat you as such.
The blind woman who switched personalities and could suddenly see (2015)
Interesting you bring this up - why don't normal businesses also setup endowments like this?

How come i've only seen universities do this?
> It would be possible for Mozilla to accept donations with strings attached that specify what the funds are to be spent on.

Best Practical, the company that does most of the work on the open source RT ticketing system, allows for sponsoring specific features or fixes:

* https://rt.bestpractical.com/NoAuth/Featured
Thanks for the context, but how is Belarus bigger than Libya?
Mozilla should abandon Firefox, fork Chromium, create the gold standard privacy-focused Chromium variant, and they should ask for donations. But they won't, and I think we'll have forgotten Firefox existed in about 10 years.
Mozilla has done much for the net not only restricted to Firefox. Wasn't aware they grew this large though.
Maybe get rid of capitalism instead?
I tend to do all my work for free, and in open-source[0]. One big reason, is that I don't feel like I really want to watch other people destroy my work, like they did for thirty years.

Another reason, is that I am not particularly thrilled about having someone else calling the shots on my work. I do what I do for love, not money or status. Once money comes into the picture, the fun drains out like a popped balloon.

I write my stuff as enterprise-class software. It may be the "tinkering" of an old codger, but it is nothing to sneeze at.

And I set the agenda. If you don't want to use my stuff; fine. No loss to me. It's great stuff, but tastes differ.

If, on the other hand, you pay me to do work for you, then you get to call the shots. That's just the way of the world. It doesn't matter whether or not it's "fun." You are paying me for a service, and it is my fiduciary responsibility to deliver. I spent my entire career delivering software on schedule, and to spec. Like I said, I found it annoying that it wasn't treated so well, after delivery, but it was their property, and I had no say.

I just found out that a company that makes two great, free, open-source utilities I use all the time, has been sold; throwing their future into doubt. That sucks, but it is also not something that I really have a right to whine about.

I am not particularly thrilled with corporations making commercial products on the back of free, open-source projects; even really high-quality ones (I won't list any, because there are religious wars over them).

If it's free, then you get what you pay for.

[0] https://riftvalleysoftware.com/open-source-projects
At least for voting, the fix is simple and I don’t understand why both Reddit and HN (with the default settings) don’t do it: make voting invisible.
That is, you sort the comments by the vote value they have, as is done now, but you don’t display the value. Reddit displays the value directly, and HN by gradually greying out comments. The problem with doing that is that it leads to bandwagoning. If I’d had to hazard a guess, a solid 50% of downvotes are people blindly ramming the downvote button because that comment already has a negative vote value.
I have spent many an idle day swimming around a reef, playing with an Octopus like a puppy.

They are delightful, inquisitive, smart creatures who seem to really enjoy engaging with these huge ungainly creatures from the land that occasionally stop by. I made acquaintance with one octopus on my local reef by introducing it to gold goins - they can't seem to resist shiny gold things, and indeed in this case, I gave the coin to the octopus and it swam off to its hidden midden (which I was able to find after a while), where it had also collected bottles-caps and lost fishing tackle.

Another time, I watched a smaller octopus playfully baiting whitefish by dangling an empty crayfish husk out of its hole .. just idly floating it in the current until a dumb whitefish came along for a nibble, and then BAM out came another tentacle from the hole, and the world was less one dumb whitefish.
curious: how about Wordpress ?
Ethereum decentralized finance is not “copying” the current financial institutions. If you think that, then you are misinformed.
Just go through https://github.com/mozilla and I bet you didn't hear about 90% of them. If you paginate further, you'll see most of them aren't maintained much anymore.
2016 answered that question.
AWS Lambda now supports custom runtimes on Amazon Linux 2