skysight-inc/HackerNews huggingface dataset:
if the user can opt-out, how it isn't user controlled?

default passwords, that can be changed, aren't under the user control?
Honestly I don't know if there's any case where a team of 10 on a project would outperform a (good) engineer or two.

Half of the 10 engineers will do nothing, the other half will have different views of what to develop and will face off one another heading into opposite directions.

Usual development work in a company does not require 10+ workers and couldn't be split over 10 workers even if you had that many.
Agreed. I've been using this for several versions already (mentioned by other commenters - dom.security.https_only_mode). Very few websites break, and they should know better (e.g. HTTPS redirects to HTTP, redirects to another HTTPS location).

I've often daydreamed of a new HN freature where non-HTTPS links have a preceeding red marker "[HTTP only]" (or similar) but never could find the correct place to write it down. Considering that Firefox is now a minority browser :( perhaps there is still usefulness in this idea?
It doesn't matter how easy the concept is if the information it contains is not something I can estimate, and in the case of git all the power is coming from indirection, which is famously inestimable stuff.

Can I use git like a simpleton? Absolutely. Can I gracefully recover from errors in its application? Nope, it never happens. It's a chainsaw and I ultimately have to solve the problem by using it like one.
I just started using Ansible and am quite impressed with its ease of use. We previously did our server setup manually, but we could automate the whole process pretty quickly (I would say 2-3 times the time it costs to set up one deployment manually). The YAML is a bit limiting, as others mention, but to be honest for our use case I'm not sure that we would want to use a more complicated tool instead - there are already more than enough different components and languages in our stack.
Reading the docs (and my memory) HTTPS Everywhere works based on a predefined list of sites that should be upgraded.

The nice thing about the new Firefox feature is that the browser won't make any insecure connections unless I explicitly allow it.
There are lots of fast, usable JVM gui applications.

Some OSS examples:

http://www.sweethome3d.com - This one has been the one app I've recommended to people outside the tech bubble! It also focuses on graphics and 3d.. really deserves to be showed off more often

http://xmind.net

https://dbeaver.com/

http://www.mucommander.com/

http://www.jedit.org

What they have in common is that they are old project - often more than 10 years old and are not on Github. Goes to show how important hype and trendiness is in our industry.

edit: fixed formatting
The main reason (JVM apps are not more popular) is that the average JVM desktop app does not perform better (or use less resources) than the average Electron app. I know this is not supposed to be that way, but one way or the other, it is.
On top of this the web UI developer community is orders of magnitude larger.
IMF and World Bank buys them some cheap human capital to spread it.. Effortlessly.
This is an important point: Modern TLS is often better crypto than most commonly deployed VPNs.
From the article:

"The road to high-quality UI on JVM is a long one. We’ll need:

a graphics library,
a window/OS integration library,
a UI toolkit.
Today I am happy to announce the first part of this epic quest: the graphics library"

Maybe you misread a bit? I do not see him suggesting, to use his first step for the UI. The idea is to build the UI kit on top of it.
Totally agree on the "staging area". I've always thought that the staging area should only activate when you `git add` or otherwise add files to it. If there are no staged files, then git commit should act like git commit -A.
Everyone starts at the ground floor. What would you tell a beginner who has to figure out 20 different technologies including git to get a basic web project going?

Besides, nobody is arguing git needs to be made weaker, just that it would be nice if it had a more gradual learning curve. Easy things easy, hard things possible. If you can’t see how git is hard you’ve forgotten what it is like to be a beginner.
> but it does make some guarantees about it being the same site as yesterday

No it doesn't. Are you thinking of TOFU via public key pinning?
Sure, I'll have a look at radare.
Centralized still makes sense for some things that should not be collaborated on simultaneously! I have used git when working with electronics and part libraries, but there were occasionally merge conflicts with the files when someone would forget to merge their work in. I wish we would have used SVN for those things!
I hope they aren't going to force users in https-only in the future. Software shouldn't cut off legacy content (old websites that aren't going to be upgraded with https) something just because in theory it is more secure. If someone is surfing the web as an adult he is responsible of himself.
Other than this there are historical components (web firewalls) that aren't going to work anymore .. so security is a matter where it is an interest of someone (certificate sellers?)
Among other factors, South America seems to show the strong winter seasonality pattern typical of coronavirus infections (not just SARS-CoV2). Much of Africa does not (the continent spans northern and southern hemispheres to a greater degree, and has far more population in a tropical belt), though South Africa seems to.

See: https://www.cdc.gov/surveillance/nrevss/coronavirus/natl-tre...

https://www.worldometers.info/coronavirus/country/peru

https://www.worldometers.info/coronavirus/country/brazil

https://www.worldometers.info/coronavirus/country/south-afri...
> I’ve used it since GitHub was in beta

This is the root of the author's issue. As another commented, git is born in a world where computers are mostly offline, people are highly technical, and will spend a lot of time manually crafting the messages they will send to the numerous collaborators. It is an alone-first software. What the author wants (and exactly what I want as well: https://news.ycombinator.com/item?id=25002318) is the complete opposite: a system that knows it's connected to other people, where changes are instantly propagated and easily visible, where the differentiator between "branches" is not "what computer does it reside on" but "who did it". That's the model behind GitHub, after all.

git is complex because it's working with a very complicated model that is not in line with what most people expect today. As I said in my other comment it seems that fossil works with that flow, but I haven't tried it. However what is sure is that it doesn't make sense to ask git to become what it fundamentally is not.

EDIT: There might be a solution with wrappers. When you look at git-annex assistant (https://git-annex.branchable.com/assistant/) you can see that the right amount of abstraction can provide something closer to what we expect... but at this point it's not git anymore, so we might as well start from scratch.
IMO Give this developer a ticket to the next ycombinator batch.

Don't know how likely that is given the current US stance on immigration, but he clearly has the initiative, even if his app is not welcome.
Maybe if our COVID response was like Germany, a lot of
lives would have been saved, like her grandfather. Why isn’t it the fault of Trump who was focused on his re-election and did the bare minimum?

“no matter how good the government is..” classic strawman. it’s like saying no matter how good the vaccine is, there would be one preventable death, so why blame anti-vaxxers.
They’re probably not the best people to be asking that question anyway. Police, politicians, and especially anybody who works in a national security role, are all people who have already accepted living with seriously diminished privacy in order to do their jobs. It’s also not terribly surprising the journalists are mostly rather delinquent when it comes to privacy controversies, as privacy gets in the way of a journalist doing their job as often as it does a police officer.
See the end, the section: What’s with the rest of the puzzle?
I know Compose exists, and it’s exactly the concern I have: look at the example apps, and compare them with true native desktop apps. Can you really call the result a good desktop UI? Is it not just a mobile UI that was blown up? Actually, it’s difficult to even call it a good mobile UI, because at the moment it certainly falls on the side of “bunch of shapes put together” rather than “UI toolkit”. Of course, while UI is just a bunch of shapes on the screen, it needs to be cohesive, and familiar, and accessible; not to mention the many, many behaviors under-the-hood that don’t show up in a screenshot.
Supply Chains in Healthcare
This is incredibly visual down to icons for the analytical technique, data source type, etc. Once you get used to these symbols you can go through these very quickly.

It's amazing to think how many things we could summarize in such a cute but useful way.
This is directly addressed inside the article, in the last sections.
I think it is deeper, the problem is that HTML tables are serialized in row and columns separately, so for example if you wanted a cell to be 2 rows tall and 2 columns wide there wasn't a local change that could allow it.

To my understanding CSS Grid is meant to solve this
I hated the sneaky QuickTime on Windows so much that I avoided it like the plague when I finally got a Mac, even though it's the default player for most of its users.
Outsourcing and Managing Coding Standards
What’s the cost of bad code? We’ll do the math so you can easily quantify the long-term cost of bad code. We also share how maintaining coding standards and outsourcing can help you put a tight lid on the costs of bad, smelly, dirty spaghetti code - and the bugs it can attract.
Imagine SQL databases worked exactly like they do now under the hood, but instead of current SELECT/UPDATE/INSERT/DELETE they used like 15 different commands with at least 4 switches each.

So instead of SELECT you'd have FETCH, PULL, CHECKOUT, CLONE, READ, PEEK, and OBSERVE. And each of them could in some cases also modify or even delete the data depending on the switches.

Imagine there was no division between DML and DDL - you just have to remember which option switches change the schema in addition to doing some other things.

And then people would say "SQL is very simple, just learn relational algebra".

That's how I feel about git :)

With SQL I know for sure I can't break the database by doing a select. I know I can't change schema by doing a DML.

With git I'm pretty sure I can't break anything by doing git status, but other than that all bets are off.
GDPR effectively prohibits ANY opt-out. A an informed consent via affirmative action must be freely given.

Apple is so much in the wrong here.
There are good reasons to insist on the use of HTTPS for all sites on the public web, with no exceptions or excuses. This topic has cropped up before:

• https://news.ycombinator.com/item?id=21912817

• https://news.ycombinator.com/item?id=24640183

• https://news.ycombinator.com/item?id=22147858
I think `git checkout` definitely needs to be there. Also `git reset` in case you make a mistake while `git add`ing
Making a Basic Chat with Node.js WebSockets
> Even though I grok git's mental model, I still can't answer the top-voted "git" questions on Stackoverflow without a cheat sheet: https://stackoverflow.com/questions/tagged/git?tab=Votes

This was surprising to me, and shows how different people's experiences of git can be. My workplace switched to git from an obsolete centralized VCS earlier this year, and I could easily answer these.

Something like this is probably where the line between those in this thread who agree that git is too hard, and those who think the detractors are just lazy and stupid, runs. Folks, people are more different than you expect!
We can burn coal for thousands of years. Thankfully nobody will care about emissions anymore.
HTTPS ensures the following things

1. You are talking to the domain that you think you are.
2. No one else can see the traffic in transit.
3. No one has modified the traffic.

It does not provide any guarantee around the trustworthiness of the domain itself. (Well EV Certs try but as far as I am concerned that is worthless.)

1 and 3 are not helpful in your example of "Am I supposed to trust them more than some man-in-the-middle" but it does help once you establish other trust in that domain. For example a friend sent you the link, or you start using the site regularly.

However personally even just 2 is a tangible benefit when I am using public connections. I very much like the idea that my browser will not send out an unencrypted data without my explicit approval.
Is consent required before setting a MAC address on a NIC? I don’t think it’s the NIC manufacturer’s duty to get consent because others fingerprint devices using the MAC address.
This is amazing.

Two thoughts:

1) It seems that the black/white formalism of ‘ a statement can be only true or false ‘ causes issues. Have people tried introducing additional options for verifiability, e.g. ‘true / false / maybe?’ or something that points to uncertainty à la Heisenberg?

2) It would be really interesting for the author to continue the line of reasoning to help add insight to Gödel’s ontological proof. ( https://en.m.wikipedia.org/wiki/Gödel%27s_ontological_proof )
I'm an academic. I use git for some projects. I would love something between git and Dropbox: Dropbox's ease of use and automation, but git's ability to add branches. I've struggled to persuade co-authors to use git. There is too much to learn.
Relevant xkcd https://xkcd.com/931/
Well, I disliked it. I see proof that every valid formula can be converted into a Godel number. However, every invalid formula can also be converted into a Godel number. So, if we are able to construct a number, then it proves what?
I get that, it’s just that this is being presented as something that will kill Swing and Electron, which obviously makes it so that many will take away “I should use this to draw my buttons” from it. I’m advocating caution before throwing away Swing right now.
Get real, you don't need GitHub
The Nazis also built highways.
I would argue that the change from Win10 to a KDE linux or a similar windows-like UX is similar to a change from Win7 to Win10.

Its fair to say that even the Win7 to Win10 switch is something people only do if you force them, but I could see the Win10->Linux change happen for a lot of people if they saw anything it had that they needed.

Not having to worry about AV and automatic updates, automatic download and in-OS-ads would be pretty huge already.

Yes, most powerusers on windows know where to turn all that off, but a lot of people, like my parents, are scared to fuck something up, so they dont touch any settings, especially not if windows tells them "this improves your experience, you sure you wanna turn it off? nudge".

A lot of people would not notice or care if you switched their machine to Linux - as long as it means they have to worry about less.
cant wait to restart the browser when im in the middle of something important
Yeah, your mileage may vary.

I was writing UIs in Swing 10 years ago, and we managed fine even back then, but our target customer is technical people so maybe our definition of "looks good" is somewhat easier.
I fully agree that the default porcelain has poor UX for managing the staging area, but doesn’t a porcelain without it encourage overly large commits?

All sorts of workflows become substantially more difficult (if not impossible) with kitchen sink commits. Undoing a single-line change, for instance. I dislike large pull requests, let alone commits that introduce a half dozen different changes.

Sure, if you’re really disciplined you can produce small commits without staging, by committing as you go along, but you’re breaking flow every time you commit in this style.

I say all this because I would love a CLI that has half-way sane handling of (e.g.) restoring staged, deleted files; doesn’t conflate restoring files with switching branches; has consistency of flags between commands (such as commit vs stash message); etc., etc. I should try gitless ;)
It's years ago, but I recall as a rookie I found mercurial way more approachable and easy to grok. Still distributed and a similar model to git, but considerably more approachable CLI interface and manpages.
A bit off topic, but recently, when I downloaded software under export restriction from Siemens (for industry automation) I saw in the license text, it is not just allowed for military applications but also not allowed to use it for police applications. I think more and more companys think they just don't want to be involved in bad press, because not all, but a lot of police things have a such bad image now.
Vice signaling.

But you're absolutely right. I'm baffled by how many people are eager to announce how much they hate people who never did them any harm, how people deserve misery and suffering, why it's fine to let thousands die.

In the past at least there was the pretense of morality, even if it was frequently hypocritical. Now it looks like all the hypocrisy is gone and all that's left is open hatred. I really hope this shocks enough people to turn it around.
I assure you that I’ve read the whole thing, and since I’ve already answered this question a couple times in this thread, I’ll direct you to my responses there.
Right, since they are not a carrier, if they are performing editorial actions on content then they are liable for content. I think this will open them up to lawsuits over the content of messages on their platform.
Being active in a project is also quite useful when looking for salaried work.

If be surprised if any worth while prospective employer did not look favourably upon it. It's often the most visible past software work you have.
The feature has an allow-list so you can configure your sites the way you want.
Is Apple still offering options that such kind of software could actually be developed by non-apple on _their_ system?
Anchoring Trust: A Hardware Secure Boot Story
Problem people have with non STEM is that they almost always have so low quality, not the subjects itself.
Being one of, if not the most prestigious technical university in the world tends to be one of those self-fulfilling things. Since you're known as top of the line, you get your choice of top tier applicants, who in turn propagate the institution's reputation for prestige.
TYPO!!: In the section "Suspicious use of subst" it says that b is being replaced, but in the second formula box a has been replaced, not b.
Furthermore the number that replaced a is not the same as the number used in the previous subst statement.
all they're doing is curating a list for people to read. It's like those DMCA lists of free movie sites. They literally provide you with a trove of urls to watch free movies lol
Impraise (YC S14) is hiring a UX Copywriter (part-time)
You can't push a rebased branch without`--force`, and the server can be configured to disallow it entirely. This is exactly how it should be: I want to be able to rebase my by public branches but not the public branch.
"Hits back"? They just state they don't agree without giving any reasoning.
I think it's confusingly worded b/c they compare to Swing and JavaFX in the first lines - so it sounds like this is aiming to replaces those. But in-effect this is just a first step towards that larger goal. Why the graphics library needs to be rewritten from scratch and they couldn't implement a better UI toolkit on top of what already exists is left unanswered - and that's confusing. All it says is "Java UI progress was blocked by the poor-performing Graphics2D"
Presumably because any side-effects of new COVID treatments would only affected those who get a serious form of COVID while any side-effects of a vaccine would be applied to the entire population.
You should be able to install most distros alongside windows without any extra work, just in the installer. UEFI+GPT boot is an option, and that never required me to fuck with the uefi setup, it just installed itself into the EFI partition together with windows's stuff, and you could pick in GRUB "windows" or "linux" :)
Am not so sure he will fare well in US. I recall Aaron Swartz faced a similar charge leading to his tragic demise.
It’s amusing to me that that never really leaves you either. Grew up split between a smallish (35k) town and rural. Now in a bigger (300k) city. As soon as I’m out of town on a secondary highway, every vehicle I encounter gets the two finger wave from the steering wheel. 80% wave back.
> The second is the DOM. It is a horrible collection of hacks that make simple things hard and hard things impossible. I have thought many times “if only was I drawing this control/layout directly, I would’ve finished hours ago.”

I think this betrays a lack of understanding on the part of the author of how to write good web components. Yes, the DOM is tricky at first, but that's because it's trying to support things like resizing windows to arbitrary sizes.

I don't even understand what he tries to say with "draw the control directly". In component-based library, this is exactly how you would work. Put your component where it needs to be, and boom, you're finished (just like in all frameworks this is a lie, you probably still need to tweak).

I don't in general buy the argument that the DOM is low-performant and low-quality. Lots of great and performant UIs have been built on the web platform.
> wearing masks

not true at least in Stockholm
Maybe what we really need is not a new VCS, just a new CLI frontend for git.
https://what-if.xkcd.com/49/
Yeah, I learned git because my supervisor was using it on a research project. I made a few mistakes but he helped me mop them up and correct them. Now I use it for everything - I honestly dont see how I could go back. I cringe now everytime I see someone with multiple copies of a file with version numbers on it. I too have tried educating colleagues on it but it doesn't stick unless you really need to use it + intertia of having an established working method.
Automatic Syntax Error Recovery
Ok, so claiming I didn’t read the article is actually against the guidelines, and you’ve done so twice so I’m not particularly in the mood to really entertain it anymore. Like, if you read the comment you just replied to, you’ll see why I made the first comment even though the thing it mentions gets a line in the article. But arguing about who read what is not fun so I’d rather we actually talk about the article itself.
More children in the academic family tree!

I would love for a well funded organization to use big data analysis to try to build as complete as possible a full family tree of every PhD:

http://nghiaho.com/?p=978

It might help show where there a blind spots :)
Solomon Islands government preparing to ban Facebook
Git's hard when you see googling for syntax as a failure in the system. If you see getting SO answers as working as designed, it's quite easy. The main learning curve is just the idea of everything being branched, which is an increasingly common concept in many spaces.
The Troxler effect, another example of how our minds filter reality
This is only incidentally correct (last stable release was June 6, 2019), because clojure is still evolving, just slowly and stably. A new prerelease was announced September 4, 2020 at https://insideclojure.org.
I am not sure, but I think it's a Joke Hilbert space
I suspect the developer learned from the experience, and would likely not repeat the same mistake.
Revolutionary Due Diligence Engine
Can you not switch to jsonnet?
I think the most common usage of that - switching branches - could be replaced with `git switch` now. That leaves `git checkout` in the set of more advanced operations for more niche use cases.

Same goes I think for `git restore` over `git reset`.