skysight-inc/HackerNews huggingface dataset:
I don't agree. I think online tools are great for quick-and-easy testing, and doesn't require any privacy issues. Mostly the benefit is ergonomics: I don't need to set up a bunch of stuff to do the thing I want, someone has done it because they had the exact same need.

The kind of thing I typically do with them:

- Diff two files

- Check brackets. JSON, jwt, that kind of thing

- Run code snippets in a fiddle site

- Regex

- Unit converters, HEX/decimal calculators

- Color pickers

In all cases, I'm using the tool before anything sensitive has been created. Why shouldn't I use a regex tool to figure out the exact string before I copy-paste it into my code? Or if I want to see if some particular little algorithm works, why not play around with it online, when an editor is already there and ready?

In any case, whatever I discover is part of a larger whole that was not set up in a way where this subproblem was going to be easy to test for, eg my particular use case may not make it easy to put a bunch of tests strings through regex.
Kurzgesagt make high quality animated videos and seem to be doing quite well. 13 million subscribers on the English channel alone. All of that despite only releasing about one video a month.
Angular for the frontend makes the most sense to me. React and Svelte are good but you need to bring in a lot more supporting libraries for more complex libraries.
Webapps like jwt.io run locally in your browser and you can monitor traffic, prevent further requests or even run them yourself to make sure of this. This post is misinformed at best.
> There is no feedback to tell if unit testing setup is complete and if unit tests are comprehensive.

Unit tests are neither required or expected to be "complete". At no point do unit tests tell you "this code is perfect and correct". Rather, they identify where code is incorrect. This is valuable information.

> I am more and more turning to functional regression testing when entire service is tested as a black box against spec.

Both types of tests (and others) are useful.
Location: Sao Paulo, Brazil

Remote: Yes

Willing to relocate: Yes

Technologies: PHP, JavaScript, Docker, Express, Koa, Laravel, Lumen, Symfony, React, Vue, MySQL, Redis, Elasticsearch, ExactTarget, GTM

Résumé/CV: https://paulo.dev/rs.pdf

Email: me@paulo.dev
https://github.com/yewstack/yew

Rust web framework generating webassembly apps.

Possible stack could be

yew -> grpc -> rust backend.
The project generator became a core part of our business (and a sales argument, actually), so it was maintained to be up-to-date. It's the implementation of what we collectively knew to be best practices: you don't always have time or knowledge to set up each individual component of a project.

If there's a later version of a component or you want to apply learning... contribute back to the project generator, to ensure other projects benefit from it

The only value we lost was the experience a dev gets setting up the infra from scratch. It is a consequent loss, but we deemed it very worth it (and retrospectively, I think it was)
Native File System API [1] is going to be the biggest game changer in 2021. So far it was little known and rarely used because of the origin trial limitations, but it will become available to everyone soon [2].

[1] https://web.dev/native-file-system/

[2] https://bugs.chromium.org/p/chromium/issues/detail?id=853326...
Maybe if they were not such a complete kleptocracy run like a mafia state we would have some sympathy, but they aren't so we don't. If they want to participate in global leadership/trade they should spend more time trying to work productively with the rest of the group and less time pissing in everyone else's face.
It would be a valid security pattern if it was created under the org scope, but it isn't.

A "service account" on GitHub is just another user account tied to a real user with that users MFA (if MFA is enabled, and since we're referring to valid security patterns, it should be).

GitHub's organizational features are poor.
Maybe people tend to favorite different things. I favorite things from time to time, but don't recall favoriting anything in this list.
https://en.wikipedia.org/wiki/Future_of_Earth#/media/File:So...
Maybe because Elon has already delivered "impossible things", like economical EVs and landing rocket boosters. That tends to increase one's credibility.

Not saying some things he has promised aren't somewhat a pie in the sky...
similarly to you I don't know what to comment on that, but an interesting trivia is that (in terms of cis hetero preferences) the median woman is above average and the median man is below average.

but as always we should be wary using too much deduction on soft science topics
Wow. Abismal number. I dreamt a side project of using that info to estimate “taste distance” between users and see what personalized recommendations come out of it, but I dont think it would work with those numbers.
Russian agency setup fake leftwing news outlet with fake editors, Facebook says
Software is not Engineering. You guys call your developers Engineers?
> asset forfeitures, they will take as many cars as they can. Maybe a good fix would be to have proceeds go to education or social welfare.

Try public defenders and legal aid services instead. Seems like a fair balance to strike.
It was one of the options I looked into, yes :)
IIRC it's python-only, so didn't fit the bill. We ended up using Handlebars templates, and Plop (https://plopjs.com/) for prompts and the generation logic. It was lightweight and extensible, worked great
For inspecting JWT tokens, I like the step command-line tool: https://smallstep.com/cli/

pbpaste | step crypto jwt inspect --insecure

It can be combined further with jq if you need to dig out a specific field. (pbpaste is a macOS cli command that prints the contents of the clipboard)
How did you get the list of HN users to scrape favorites from?
Jokes about the year of Linux on the desktop come to mind, but complex software that needs to track moving targets should be allowed time to mature.
Those are very interesting things to get excited about. No need to promise and exaggerate.

Unfortunately, Elon Musk is Elon Musk.
Being portable and cross-platform doesn't mean you can't take advantage of things unique to a subset of platforms to provide a better user experience on those platforms. You just need to check for support and provide fallback on those platforms without support. One could easily argue that just using the lowest common denominator across platforms is in fact the lazy and/or incompetent option.

Also you mentioned in another comment there being 2 browser-engines. There are in fact 3 major browser-engines.
Tesla cars are far from being economical. A Mitsubishi i-Miev is economical.
i hate how when I'm copying + pasting a url to a test or internal environment, to the browser address bar - I may have a typo in there, or an extra space. Bam! The URL just became a google search
If your attitude had been prevalent in 200x we had still been stuck with IE6.

The reason we aren't is because we "old" devs fought against it and got lucky that Microsoft forgot IE at the same time as Firefox became really good.

Today Firefox is getting good again (edit: see added footnote [0]) and Google only needs to do a couple of mistakes, and that includes the one which they already seems pretty committed to - or maybe get some IMO really well deserved punishment for anti competitive behavior - before things become more competitive.

But that still depends on us fighting to keep the web cross browser compatible until then.

[0]: for my and many others purposes it was always better, I actually tried toblike Chrome back when it was the underdog and it just never cut it for me
While I agree with the bubble label, I think the reasoning described in the article is wrong. Since the bond yield inverted earlier this year, investors are looking at anywhere to put their cash for an ROI. And to further fuel the situation, the QE policy of the US treasury (I.e. printing money) has resulted in more cash sloshing around with nowhere to go other than the stock market. These factors are fueling the rise seen in the share market much more than simply “speculative investor sentiment”. Like all bubbles, this one will inevitably deflate (hopefully not pop). I do think that these factors have multiplied which in turn has attracted even more investment. I believe that now is a very dangerous time to invest in the share market. A lot of this is speculation. With any luck we can navigate this situation without a crash, though I remain highly skeptical.
I don't understand.

What commands are you sending your macbook outside installations?

It's not like you are running a server, you still need to SSH into the server to do anything.
For JWTs, I agree with this stance, since they are security credentials and therefore basically all of them are sensitive information.

I don't discourage online tooling in general. It's a risk/benefit trade-off---No, you shouldn't paste sensitive information into websites run by other people in general, but for non-sensive information where you don't care if the online tool is logging it or not, go for it. There are significant advantages to not having to roll your own for every single thing you need to do.

Carried to its extreme conclusion, "Don't use online tooling" implies "Don't read jvt.me," because who knows what that website is doing while vending you blog posts? clearly, you should roll your own solution by maintaining your own private collection of knowledge that you never share with anyone else. ;)
Yeah, I think we should just ignore whatever he promises and consider only what is actually delivered.
Tesla may be in a bubble, but this article doesn't provide a compelling argument. See Rob Arnott's analysis on Tesla for a more robust bubble argument that's based on the financials.

Comparing Tesla to Bitcoin is flawed. Tesla is a publicly traded stock that produces products and is subject to financial audits. Bitcoin is completely different and can't be valued like a traditional financial asset. See Robert Shiller's discussion.

Tesla will need to make a lot of profit in the future to justify a $442 billion dollar market cap. They'll need to go from breakeven to making around $66 billion a year (for a P/E ratio of 15).

Jeremy Siegel wrote a great article in 2000 about how tech companies would need to make massive profits to justify their bubble valuations. It's still a great read.
You can find QNX 6.5 and suitable license keys by digging around on the web a bit. 6.5 is probably the last version suitable for use as a desktop OS—I believe 6.6 is where they started to remove the ability to self-host, and the GUI was completely removed by QNX 7. (It's a shame, because IMO the Photon GUI is really clever.)

Unfortunately QNX 6.5 is pretty old and not too well-supported (QNX is fully POSIX-compliant so you can sometimes get things working on it without too much trouble however) but it's damn fantastic to play around with in a VM. It's actually so fun.
Removing CPU limits seems like a bad idea now that there's a kernel fix. But putting that aside...

I don't understand why pods without CPU limits would cause unresponsive kubelets. For a long time now Kubernetes has allocated a slice for system services. While pods without CPU limits are allowed to burst, they are still limited to the amount of CPU allocated to kubernetes pods.

Run "systemd-cgls" on a node and you'll see two toplevel slices: kubepods and system. The kubelet process lives within the system slice.

If you run "kubectl describe <node>" you can see the resources set aside for system processes on the node. Processes in the system slice should always have (cpu_capacity - cpu_allocatable) available to share, no matter what happens in the kubepods slice.

Capacity:
cpu: 8
ephemeral-storage: 83873772Ki
memory: 62907108Ki
Allocatable:
cpu: 7910m
ephemeral-storage: 76224326324
memory: 61890276Ki
pods: 58

Granted, it's not a large proportion of CPU.
I think this list is more useful:
https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...
Design Sprint Case Study (Zero App)
One of these things is not like the other.

One is backed by multiple factories producing vehicles, with even more factories coming online in the next year, an entire industry facing "innovator's dilemma" with a petrol & diesels new sales ban coming into force 2030-2035 for most countries.

The other, a virtual commodity not backed by any physical items, issuers or a real economy.

How are they comparable?
Because “faster” is not the only variable involved. If customers wanted 7200 they’d buy that, but the difference in power and heat between a 5400 and 7200 can reach 100% which is an issue when you have sized and enclosure for one type and get the other.

Noise is also an issue, if you were looking for an HTPC drive for instance you don’t need the increase in performances but the noise pollution is a problem.
Diversity in Tech: 3 Actionable Steps for More-Inclusive Tech Teams
did you validate that those sites do not batch data input over time and send them out, much later than your direct user input interactions?
"pissing in everyone else's face" - isn't it what US is doing?
Correct. A business logic controller can not directly corner the outside world, it must talk through a service.

This is nice because it prevents leaky abstractions into the controller layer. Actions across services that need to be atomic can be grouped in an XA transaction:

// Xa start
databaseService.reset password(user);
emailService.notifyPasswordChange(user);
// Xa commit
Jsonptr: Using the wuffs memory-safe, zero-allocation JSON decoder
When you write formulas by hand, don't you write them in serial format i.e. symbol by symbol? The advantage of hand is that you can often write the symbols in whatever order you want, while latex has pretty much a canonical order.

Eg. by hand, you can write down the denominator of a fraction before the numerator. While latex require numerator before denominator.
Mkdocs+git repo+CD pipeline and you have yourself a git-based markdown wiki.
I emailed QNX a couple years ago about hobbyist or non-commercial licenses and they replied that they no longer offer them.
The basic rules of UX Research
Location: Hungary
Remote: Yes (Preferred)
Willing to relocate: No
Technologies: Java, Spring, Linux, front-end (js, angular6+)
Résumé/CV: I can send it in email; https://www.linkedin.com/in/zoltantoth/
Email: hn [at] tozo [dot] info

I am a senior (10+ years) backend developer (but pro-efficient on front-end as well) working for financial and telecommunication companies. I spent the last 7 years in Dublin and moved back to Hungary this year.
Remember when Saudi Arabia tried to convince Moxie to help them intercept people's Twitter traffic? [1]

[1] https://moxie.org/2013/05/13/saudi-surveillance.html
http://jsonprettyprint.net/ ranks high for "json pretty print" in Google and is an example where data hits their server.
How does your product ensure privacy?

In other words: how does your product make sure people aren’t going to abuse it by distributing unique copies of their workbooks so they can track the exact times of individual recipients looking at them?
It works fine, but the font is teeny tiny.
142 solar mass black hole: https://www.ligo.org/detections/GW190521.php
Well, if you're using slack for example you'll normally find that business use it to send a lot more senstive stuff to each other than just API keys. If your slack gets breached you've pretty much got yourself a data breach that you'll need to report (if you're covered by GDPR. If you're GitHub is breached you've probably got major issues and need to do a code aduit to make sure there are no backdoors. If any part of your infrastructure is comprised, you're in trouble. If you get to the nity gritty you've got to store senstive data somewhere.

Honestly, I find it super annoying when someone is fine with me sending them a link to kibana to which the access details are in slack to see a API key but have an issue with me sending the API key to them via slack. The whole we don't trust slack but we'll send customer data to each other via it, have all of our secret business info on it, but the API key for an internal service that just outputs public info, that's too dangerous.

Oh, and then there are the people who store everything on vault or something and then give out the password willy nilly. Mate, if it's got to be encrypted then we shouldn't be giving it out to everytone. If it's got to be given out to everyone then it's not senstive data, it's just private.

For most businesses, the main thing you need to keep safe is your database.
You're right, it doesn't run in 2 out of the 3 browser-engines we currently have. Which actually makes the GPs point even more important.

Or do you also want to include the fringe engines like kHTML, Trident, links, etc too...all of which also wouldn't run the APIs in question?
How to lose half a million euros because of missing quotes in JavaScript (2018)
>it's always "Sorry mate I didn't see you".

Ah, the SMIDSY: https://www.youtube.com/watch?v=eqQBubilSXU&t=387s

That video covers the optical illusion that leads to it and what motorcycles can do.
What about when you commit a file with client data or PII?
If we really want to be pedantic the post your comment refers to never said they were W3C standards. It referred to them as W3C specs which since they are api specifications and published by the W3C is accurate even if they are not standards.
Can’t remember the last time I had a centos kernel update (kernel-ml) break anything over the past 7 odd years I’ve been running it across hundreds of servers.
Well that was a silly bet. Of course we were bound to find something in between a just formed black hole and a supermassive black hole.
So I'm not the only one.

It's even worse than that though, enter 'myintranetsite' and hit return, and you end up on a Google search page. Instead you have to enter 'http://myintranetsite'
Lol you are totally right...the number of times people thought this was a scam. I need to rebrand my website and I've started using the Latin name.

Miraculin isn't banned, it is just not allowed to be sold as a food ingredient. For example, it can't be incorporated into a Coke product. For that same reason, Coca-Cola did a toxicology study Q4 of 2019 and showed there were no possible long-term side effects. They are trying to get it approved as GRAS status because they are working on a natural diet coke that doesn't taste bad. Here's the study:

https://pubmed.ncbi.nlm.nih.gov/31421212/
SEEKING WORK | EU-based | Remote | Frontend | 10 years of experience
Tech Focus: React, Angular, Redux, NodeJS, Webpack, Puppeteer

For a longer list of tech stacks I have experience with, see my CV: https://mherczeg.github.io/cv/

Rate: 50 EUR/hour

Contact: herczeg.mt[at]gmail.com

I also offer test automation and devops consultation.
Russia is trying too much, way above it head. It is a developing country, yet it is acting as if it is a strong power. It is both annoying and pathetic. At least US has earned its right to piss in everyone else's faces.
Here's a story that might make you not want to do that.

We ran Kubernetes with the standard scheduler and node autoscaling for a long time, and used to allow developers in our (simplified) manifests define resource requests and limits. We saw that with our current config, we always had some unused capacity (that we wanted) since the scheduler spread out workloads while the autoscaler was only throwing nodes away with less than 70% load. So we started ignoring the limits provided by developers. This was initially a great success, our response times in the 99th went down drastically, even during sudden traffic spikes.

2 years later, and nobody cares about resource allocation for new services anymore. We can essentially never disable bursting again, because too many services (100+) use the extra capacity constantly, and due to our organizational structure we can't really _make_ these teams fix their allocations.
Not a command, but an argument to a command. I wish I'd known about the -execdir argument to "find" earlier. It's very handy for any kind of "find every file named X and run such-and-such command in the directory containing X" scenarios.
Record-breaking gravitational waves reveal that midsize black holes do exist
Selenium Best Practices for Efficient Test Automation
While this is intuitively obvious, it doesn't really always play out that way in practice since interrupts can be expensive to handle. For example polled IO can be significantly lower latency than waiting for interrupts.
The hard drive industry is such a weirdly complex marketplace. For example, there's people dedicated to "shucking" the external hard drives for the purpose of extracting the drives inside for use in a NAS or wherever, which would normally sell for higher than those with the external enclosure included, then chronicling the types and attributes of the drives they've found. The https://www.reddit.com/r/DataHoarder/ subreddit is a strange place.
India bans PubG and 117 additional other Chinese apps
It was less "should not exist" and more "should only form when black holes merge," and apparently the "black hole mergers fill the mass gap" hypothesis is now supported by evidence. Nobody was claiming that there is some physical reason black holes of such mass could not exist, only that the best understood process of black hole formation should not allow for such masses (but other processes can).
I'm not sure if this is a real issue; Normally (on gke for example) you can't use 100% cpu because of this.

If they saw the issue, then either they have not configured their nodes right, missconfigured them or perhaps run something very old?

I'm quite curious to see a proper test bench
Too much attitude, not enough substance in this piece. It does little to actually fulfill the promise of the title in a way that hasn't been done hundreds of times already.

Number go up, so people buy. Number will go down. Don't enter a burning building. Don't try to catch a falling knife.

Yes, we all know that.

Assets go through periods of being overvalued all the time. There's a big difference between that and a bubble.

Nor does the author even mention the main difference between Tesla and Bitcoin. Tesla is a company and there are tested traditions of valuation that generally hold over time such as price to earnings ratio.

Bitcoin has no earnings. It's more like a currency or gold. Therefore, valuation is more challenging, but still possible given some work. Had that work been done, some actionable conclusions might be drawn.
It's a lengthy article but I didn't learn anything other than the author likes the word "bubble".

The article claims that Tesla valuation is not based on fundamentals but it fails to present any fundamental model.

Here's one model that justifies price target of $600 (i.e. much higher than current $480 price): https://twitter.com/garyblack00/status/1300540006864486404

Now, you might disagree with Gary Black's numbers and think that they are too optimistic but at least there are numbers to disagree with.

This article, sadly, lacks any quantitative or qualitative analysis to disagree with. You should probably disregard people who's only argument is shouting "bubble" and comparing anything to bitcoin.

For the past 10 years Tesla has been growing revenue at 50% Compounded Annual Growth Rate.

If they keep growing at 30-50% for the next 5 to 10 years, they'll grow into a valuation that might seem excessive today. That's a very simple and yet more often than not unappreciated math behind compounded growth. Einstein understood it. Warren Buffet understands it. The author of this article doesn't.
We've thought about that; the style I've described is very non-OO. It is easy to teach though and it makes unit testing a breeze.

I like the architecture you've described. I think we arrived at where did because it's a natural for when using a DI container, which manages state and transaction groups for you.