skysight-inc/HackerNews huggingface dataset:
How does Mullvad do it, then? Their Mac app is downloaded directly from their website, and WireGuard is used for their VPN.
> By trying to shoehorn node/go modules into Debian packages we are creating busy work with almost no value.

Another problem, at least with python I've encountered this, is that the debian packages sometimes seem to fight what you downloaded via pip. It's not made to work together. I'm not a python dev so it was very confusing to figure out what is going on, and I wouldn't be surprised if it would be similar if you mix npm and deb packages for js libs. They don't know of each other and can't know which libs were anyway provided by the other, then search paths are unknown to the user etc. I think I went through similar pain when I had to get some ruby project going.

My gut feeling is that it would be best if debian only supplied the package of the software in question and let's the "native" dependency management tool handle all the libs, but I guess that would get the debian folks the feeling of loss of control, as it indeed makes it impossible to backport a fix for specific libs; rather you'd have to fiddle with the dependency tree somehow.
I don't disagree that it's a threat. But that threat is always there anyway. We prefer the democratic process because it's less destructive than regular, bloody power transitions. A guillotine can be seen as a reminder for why we have democracy. So in a way it's a pro-democratic symbol as the threat is there to enforce democratic norms.

The threat only becomes misguided if you're wrongly under the impression that democratic norms have been violated and thus you're threatening legitimately elected officials.

Think of it as a prisoner's dilemma. Perfectly rational or virtuous prisoners might cooperate out of their own volition. But even very selfish prisoners might be convinced to cooperate if they repeatedly get reminded of the grisly outcomes that happen to defectors. We might prefer the former (virtuous actors) but if we can't rely on everyone being like that then encouraging good behavior through threats is the next best option which is still far more preferable than the worst possible equilibrium.
A Gun is your option to civil discourse? Oh my...
> the formula that maximizes engagement that benefits them and ad revenue

The algorithms have only settled down on the extremes which we've already known sell: sex, violence, fear, outrage.

Fox News was selling fear and outrage long before Facebook's algorithms discovered that fear and outrage sells. Every grocery store had tabloids right there at the checkout, already optimized for engagement from those with obvious self-control and critical thinking issues. In fact, the grocery store is an excellent example of a place that has been heavily optimized based on human psychology. They want you to buy the cereal and other high margin items. They put the basics on the periphery, etc.

Social media is a problem, but I don't think it's the problem. We have deeper issues we need to dig to.
Isn't it a bit more subtle than that? The business issues with free users are well documented, but this is a bit different. What we're really taking about is GitHub - you don't have the same volume of low effort comments demanding features on pre-GitHub collaboration tools like making lists, IRC or even using the email address associated with commits.

I'd suggest that it's more a combination of: the volume of users that now have access to the world's most popular git hosting service is vast compared to the number of people who can usefully contribute, the ease with which maintainers can be contacted through it and the "friendly by default" stance that most maintainers take on a platform where your stars are more valuable in the real world than your CV.
I think this attitude reflects much more on your misplaced understanding of what OWS are doing and why, rather than anything meaningful about your critizisms.

It's a _really_ poor proxy for most things, but they're the ones with $100mm of somebody else money. I suspect your opinion that they're "wasting" any of that is much more likely to be that you don't understand the goals, rather than the people behind _that_ much money letting it be "wasted".

You've demonstrated very little understanding of the reasons behind the problems you cite. Do you know the tradeoffs behind the decision to limit linked devices? Do you think OWS's priority on desktop video call quality is the same as yours, and do you know the tradeoffs they're making by choosing not to prioritise that? You pretty much admit you have zero clue how or why they're using SGX - which is one of that most innovative privacy techniques in the entire space (it's not perfect, but it's about as diametrically opposed to how Facebook et al do contact discovery as it's possible to get).

[Edit: It's also possible _my_ understanding of what Moxie and OWS are trying to do is wrong, and I'm crediting them for or at least giving them a pass on a lot of stuff based on that. But I don't think so. I've been reading their blog since they worked on an Android app called TextSecure back in 2014 or so. Moxie is a friend of a friend, and I'd eaten and drunk with him. I think I have a reasonable understanding, for an outsider, of what is important to them and why they're doing the things they do.]
This is wrong and just plays into your own confirmation bias.

You can choose to believe it if you want, but it’s not the truth.
The fact that the Markdown URL format cloaks URLs is user-hostile.
> (For the record, I got maybe a total of $10 in donations from thousands of hours of FOSS work. Actually a high profile project I worked for did receive sponsorship, but nothing went into my pocket for obvious reasons.)

Can you expand on the last bit? Is it common for sponsorship not to go to the actual developers working on the project and getting eaten by middle layers of bureaucracy?
Show HN: Instagram Newsfeed Template with Bootstrap 5 and Material Design
I was under the impression they would notarize essentially anything that doesn't match known malware? It's an automated system, not a manual review.
I disagree, I'd rather have my own government decide what is acceptable rather than an American multi national projecting their own rapidly shifting cultural norms.
Two Year Work Retrospective
It's not trendy, it's how I've been doing databases my whole life. You don't let users actually delete stuff from your database. That's crazy.
> WebKit used to use Skia as well afaik, but switched to Cairo(a FOSS 2d graphics library without any connections to Google) after Google forked WebKit.

IIRC, Skia and Cairo were supported simultaneously before the Blink fork.

The Apple ports have always used Core Graphics, provided by the system (or with Apple software—notably iTunes—on Windows).

> The same thing happened to V8, Apple made JavaScriptCore to remove dependencies on any Google-owned code after Google stopped contributing to WebKit itself.

JavaScriptCore far predates V8: it's a fork of KJS dating back to the KHTML/KJS fork into WebCore/JavaScriptCore.
It’s a good thing Parler has been taken down so we don’t have to worry about people having these thoughts anymore /s
Comparable to the efforts spent for the international stock and trade markets I guess. Standards, treaties, taxes, lots of quirks and paperwork.
It's pretty easy to design the study if you observe that accounts of telepathic aliens descending from metallic crafts are strongly correlated with demographics subjected to cultural depictions of such aliens and crafts in popular media.

It remains to this day largely an American phenomenon, and the secretive and technological nature of the cold war cannot be ignored as a factor. Brainwashing a school that aliens arrived seems preferable to leaking information about critical and advanced (for its era) defense technology.
Mustapha Abubakar Emerges Substantive Commandant General of Nigerian Peace Corps
The mind is spooky
This is completely irrelevant. The multicore TDP of a Ryzen can be as low as 5W per core and as high as 20W per core if you boost it a lot. It's purely a matter of what you are setting the frequency to.

The M1 core is not that far away. A single core can boost up to 15W or more. The reason why laptops catch up to desktops in single core benchmarks is because their single core power budget is almost exactly the same but every time people act as if there is still a 4x energy efficiency gain left to be exploited when there isn't.

Idle power is a matter of how integrated your system is. The M1 is highly integrated so it will consume less power just like any other integrated SoC. When people buy desktops they want to get as far away from an integrated system as possible.
The tone might be off but it seems like a perfectly valid question.

If most users have wanted X for years but the developer instead spent her energy implementing Y and Z that noone else cares about, that begs questions like how are features prioritized ("based on what I want to work on" is a valid answer but needs to be explicit) and who the software is for ("me but sure you guys can tag along and use it for free I guess" is a valid answer but needs to be explicit)

Maybe some of those users who have wanted feature X for years would be happy to pool some cash to make it happen if given the opportunity.
Incitement of violence isn't measurable. The US had autonomous zones and communication was allegedly through Twitter.

It is a cheap excuse to take blame from the actual perpetrators to inconvenient platforms.

I like unfiltered platforms very much and Parler wasn't that attractive, so I appreciate them being the fall guy. But I also have problems with blatant different weights that are used to measure transgressions.
Why? It works spectacularly well. It's funny to watch all these people who use it suddenly get up and bashful about it now and then; the democrats won house, senate, and presidency very much focusing on identity politics.

I think if anything, the scary thing is that it works better than caring about the poor at all. It wasn't democratic ideas about poverty that made them such a force...just accuse people of homophobia and you've already put them on the defensive if not won. "Alt-right" is such a wonderful tool-just hint someone is it, and a person's mind does all the rest even though they may have no idea what it even means. Just say it long enough and loud enough in the right tone of disapproval and you have magic.

I'm not sure how much of this is /s.

When I was against gay marriage, I sat down and tried to think a lot about how marriage related to procreation or was a special institution. How religion related to it, and whether or not it needed protection. I did feel eventually civil unions were the strongest compromise, because there were legal aspects to recognizing couples that were important but the special nature of heterosexual marriage and its relation to tradition and religion mattered to. You can disagree about gay marriage but realize that there are definitely things gay couples should have in a legal sense too; hospital visitation rights as one. A lot really was uncertainty about metaphysical and philosophical ideas I think.

But all you had to do to shut all that down was to accuse me of homophobia and bigotry. It's insanely effective because a person has to now defend that whatever he is proposing isn't because of deep-seated irrational phobia or anger. It really worked.

Now i pretty much just shrug and say "What are you going to do, you're conquered." Pay the Dane the Danegeld when he asks.

Gay marriage as an actual act is not really a success. In my state last year all of 700 people got married in same sex couples out of a population of 4 million, and even with the low straight marriage rate here thats 700 out of 20,000 a year I believe, not even .05 percent. Ever since mid 2015 we have never seen even 1000 people a year use it. That's the huge irony of all those identity politics...they were a club to beat people with more than a vital need it seemed.

It's easier and more effective to use identity politics. They aren't going away. I mean lord, "live and let live"-be honest, you think you're going to allow us to do that with climate change an issue? When you want us to learn to love the veggie burger and electric bike everywhere instead of using cars?

I mean it doesn't work well on the receiving end but hey, like the simpsons treehouse of horror episode, sometimes the dolphins just want it more. Luckily it seems people get embarassed of conquering after a bit so it fades.
How to do better on coding interviews
> Please read a history book, preferably one written in the last century.

I've read quite a few, and they don't bear out your description at all.

> Human societies are cyclical, repeatable, and to some degree, predictable.

Not really, not really, and really not.

> At least 75,000,000 people think one way

74,222,593 people conclude, for a wide variety of different reasons, at a particular point in time, to vote for a particular candidate. But even those 74,222,593 people don't “think one way”; if that wasn't obvious from, oh, actually listening to them at the time or having a basic understanding of humans, it's pretty damn obvious right now, when in defeat the Republican Party which was, if nothing else, pretty unified in electoral support for Trump, (much less the broader group of Trump voters which necessarily included a substantial number of non-Republicans) has been turned against itself with great intensity by Trump’s post-election actions, starting with the election challenges and escalating through the Trumpist attack on the Capitol.

> Deny them the right to speak openly and what might you have?

No one is interested in denying the vast majority of the people who supported Trump in the last election the right to speak openly. You are railing against a strawman.
Double setup for encrypted email on iOS/macOS: via S/MIME and PGP
I am worried here that the alternative we'll end up with is applications that rely on vendoring will end up distributed entirely outside the Debian repositories... hopefully with go get/npm install, hopefully not with "download it from my website!"... But either way you lose a lot of the benefits that being officially in the Debian repos would bring. Devs want to distribute their software to users, and they aren't going to chase down rabbit holes to get it packaged to comply with every different distributions set of available dependency versions.

Really this idea that a distro (even a large well maintained one like Debian) has the resources to package a set of known versions of go/node packages for common open source software seems wrong? If they aren't going to package every exact version that's required, how is it going to be possible to test for compatibility? There is no way. And no dev is going to downgrade some random dependency of their app just to comply with with Debian's set of available versions.

Developers hate this versioning issue with languages like C\C++ on Linux, it's a huge pain. And that's partially why dependency management in languages like Go/Node work the way they do. A multitude of distros with slightly different versions of every lib you use is a huge headache to dev for, so people have designed languages to avoid that issue.
why not. it's how sales tax works
In AWS, it's yes. The latency of first byte from S3 is about 20-30ms, close to what you can expect from HDD.

Ceph is great, if you can master the complexity under the hood, MinIO + Redis + JuiceFS could be the easier answer for beginners.
https://www.youtube.com/watch?v=ulvgWoChvBU
Depends if it's life that has common ancestors with us or not.

If life originated independently twice in our Solar System it means whole galaxy should be teeming with it.

It doesn't look like it does - so the Great Filter moves from "rise of life" to "rise of complex life", "intelligence", and "technical civilization".

That's very bad news for u,, it dramatically increases the odds that technical civilizations usually destroy themselves soon after they develop.
... especially when there is a government organized disinformation campaign: check out the documentary Mirage Men!
An editor expresses a viewpoint through curation. Curating a feed is an editorial activity.
Stop expecting too much from junior devs! What makes a great junior developer
Is there evidence that these people were incited on Parler instead of Twitter or Facebook?
I never saw a dime and never looked into spending details, but to the best of my knowledge, sponsorship money largely went to hardware for infrastructure; then some went to sponsoring physical meetups, e.g. reimbursing travel expenses of team members who attended FOSDEM. It’s not a lot of money so if everyone gets paid I suppose it would only be a token amount.
Free users don't care if you tell them to fuck off.

The company paying $10k can't change vendor overnight so it's in their best interest to stay in good terms. Also in his company, the guy you're talking to don't want to be "the guy who pissed off that key vendor".
Reminds me of "running amok" from Malaysia and Indonesia.

> In a typical case of running amok, an individual (often male), having shown no previous sign of anger or any inclination to violence, will acquire a weapon (traditionally a sword or dagger, but currently any of a variety of weapons) and in a sudden frenzy, will attempt to kill or seriously injure anyone he encounters and himself.

https://en.wikipedia.org/wiki/Running_amok

Culture-bound syndromes are fascinating.
How to Mitigate Risks When Hiring Contractors and Freelancers?
Look, up in the sky – it's a flying Cadillac GM unveils futuristic vehicle
If all you have is a hammer...

It's not the first time debian package policies seem backwards and trying to shove a square peg through a round hole. I hope the solution does not end up being "make APT do it" because APT is a terrible package manager to begin with (I hate every second that I had to fight APT over how to handle PIP packages that I would very much like installed globally).
I'd say the "tech" in their comment is "good recognition tech and all the foundational ML/AI tech that gives it practical application which will unavoidably include unpalatable ones."
Incitement is akin to assault, yes. In that both invoke violence to overpower others. A threat of violence isn't an expression of an idea as such.
How would that work? Signal is a 501c3.
If it was describing that as "worse", didn't leave it very clear, and in any case, that's an awfully ambiguous comparison. Death from influenza was slowly asphyxiating, and sometimes even hemorrhagic, neither of which sound especially peaceful.
I disagree about “vastly simpler”. Only when you disregard all the complexity that managing shared libraries bring. Presumably all dependent packages will ship their own updates at some point and will be rebuilt anyway. And yes in a very specific case of having to emergency ship critical fix shared library is slightly advantageous but at what cost?
I agree with you, unless they pose a threat to your family/property. I've saved many a snake from my yard. Their behavior is so predictable that I've never really had a fear of them
Debian policy is very sane (no network access during build), but it does seem like modern software just assumes that the Internet is always available, and all dependencies (including transitive) are out there.

The assumption is a bit fragile, as proven by the the left-pad incident ([1]). I hope that whatever the outcome of the discussion in Debian will be, it would keep the basic policy in place: not relying on things outside of the immediate control during package builds.

1. https://evertpot.com/npm-revoke-breaks-the-build/
Although a short phrase, "armed Trumpist militias" is doing a lot of work in that sentence. Even with hindsight, he is still technically wrong. An armed militia is a very different beast from a unarmed but violent right-wing protestor.
Back in the summer protestors stood outside Jeff Bezos's house with a guillotine: https://twitter.com/dcexaminer/status/1299022885231538176
It's like when you give your old stuff away on Facebook/craigslist/gumtree - when it's free, you'll get very entitled people messaging you whether you can deliver it to them, or don't keep agreements. Asking for $5 removes 99% of the trouble.
Strange Drink Clears Clogged Arteries and Blood Vessels
I'm not entirely sure the security argument makes sense here.

If a library is API compatible, does it matter if it's been vendored or not? If it's not vendored, you release the new build and be done. But if it's been vendored into 20 packages, you just need to bump the vendored version & rebuild those packages.

The languages we are discussing where vendoring is common have simple build processes, and well defined dependency management mechanisms (go.mod, package.json). So it's not difficult to bump the version of a dependency and rebuild a package in those languages. A large part of the work here should even be able to be automated.
I wish there was a portion of the taxes, say 10%, that the citizen would have the option to allocate to the category of their choice. Every year on your tax return you would pick education or infrastrucure or military as the target of your taxes. I think it would help with the feeling.

Donations to public interest organizations works a bit like this. Part of the donation is removed from your revenue so it's like sending tax money directly to things you believe in.
Task, Story, Epic, Quest
love this already, been trying to learn webrtc
>> That's what vacations are for. The whole point is to miss things.

> That may be an effect of vacations, but that is not their driving purpose

That all depends. A confucian official was apparently required to take a two year mourning period following the death of his father. I have read the theory that one purpose this practice may have served (intentionally or not) was ensuring that no one could usurp too much power.

More recently, I have read that some bank employees are legally required to take a certain amount of vacation, with an explicit justification being the idea that if you are using your position in the bank to engage in a lot of financial fraud, you may find it more difficult to keep the fraud going while on your legally-mandated vacation.
It appears they have.
"
The file you are trying to download is no longer available.
This link is unavailable as the user’s account has been closed for gross violation of MEGA’s Terms of Service.
"
you are a true hero :)
2020 Game
https://www.mcgill.ca/oss/article/critical-thinking/dunning-...

I want to point out that there are many fair criticisms of the Dunning-Kruger result and methodology.
>The Internet is not real life, just because someone wrote something somewhere means nothing

sure but how is letting them on twitter helping with that, are there fewer russian trolls on twitter? These dedicated sites are literally 100% concentrated insight into these communities

Authorities in particular, I'm supposed to believe the folks at Homeland Security can't go to Parler and do some open-source intelligence and we need to let the trolls on Facebook instead? It's not like we accidentally pushed the perps into the scary darknet and need the IT guys from CSI, they were literally announcing this stunt proudly to the world, I just don't follow the argument at all.

In fact if the riot hadn't been successful I'd have said Parler is a honeypot because people registering with their ID posting openly that they're starting an insurrection is just too absurd.
They're talking about "application projects" which I understood as actual programs, not libraries. As a user I don't care if the tools I'm using are written in C, Python or JS, so I shouldn't have to remember which package manager to use, Debian should include them all.
Tips for Writing a Great Article