skysight-inc/HackerNews huggingface dataset:
Both Maven and Gradle suffer from bad user/developer experience. I think it's partly due to the culture and mindset that Java dictates to its ecosystem. The languages determines our experience, and the experience influences the culture.
Yes, that's the one I used to submit a ticket.

I only received follow up answers with urls where i needed to sign in. Which is really weird, because I can't.

They mentioned that those urls can be used with blocked accounts, but my account isn't blocked. I submitted screenshots with where the process goes wrong, but it seems that they are ignoring that crutial part :).

I always receive the message to confirm a notification on my phone during logging in, but there isn't one coming and I know they have my correct number and it hasn't changed in years.
Yes, exactly what I meant, thank you.

And very well said I might add. I don't mean to leave a vapid "I agree with you" comment, but your analogies are fantastic. They are accurate, vivid, and easily understandable.
If you go that way, it opens a rabbit hole that just goes on and on....

rational prime, primitive ideals, prime ideals, primaries and semiprimes...
... if p is a rational prime and d be a squarefree integer, then p is prime in Z[√d] if and only if f_d(x)= x²-d is irreducible mod p.
I've been in maybe 6 meetings my entire life that couldn't be replaced with a three paragraph email.
They're asking people to share their debug logs to help diagnose this potential issue: https://community.signalusers.org/t/help-needed-please-send-...
The way I see it is he's just trying to be extremely cautious about legalities. Which should always be fair but especially when you're dealing with a corporation like Apple. It sucks that it hurts collaboration but I find it astonishing that people are trying to blame him for it when all he wants is to protect himself legally.
Measuring Customer Obsession – 12 KPIs
2K slots added to NRG drive-thru vaccine clinic now full
Reference counting is a GC (and often not a very good one). In low-level domains you often don't want a GC for various reasons.
This is most probably because you have dynamic IP address and your router resets at the same time every day to fetch new IP address.
You're gatekeeping here, interesting tactics you've developed to avoid having to counter valid arguments people put forward - along with claiming one of my replies to you was https://en.m.wikipedia.org/wiki/Gish_gallop - here, https://news.ycombinator.com/item?id=25802608
This is why journalists generally try to confirm information before publishing. I wouldn't say it never happens, but there is supposed to be some amount of verifying that wouldn't have been done on a personal job offer.
Science Is Back [pdf]
Apologies, truncated link. Here is the correct one:

https://buildbackbetter.gov/wp-content/uploads/2021/01/OSTP-...

Letter from President-elect Biden to Dr. Lander, the new Director of the Office of Science & Technology Policy. Would you include any other driving questions?
Something can be both propaganda and factually accurate at the same time. There is no such thing as a neutral source. When it comes to China, if it's not the CCP party line then it's probably relayed through Falun Gong affiliated media.

> This is a farrago of rumour and hearsay.

I disagree. I can see two unsupported claims here:

"The U.S. government has reason to believe that several researchers inside the WIV became sick in autumn 2019, before the first identified case of the outbreak, with symptoms consistent with both COVID-19 and common seasonal illnesses."

"Despite the WIV presenting itself as a civilian institution, the United States has determined that the WIV has collaborated on publications and secret projects with China’s military."

These may be true or not, but the evidence is not presented.

All other points raised are either opinion or facts that have been known to the public for a long time.
Well, as long as you are spending 6 or 7 figures a year on advertising with Google, you'll have a account rep at Google that you can always reach out to. Your ad spending level works as Google's filter for which websites on the internet that they actually give any care about not killing.
Examples are in the post, and from my experience, FIFO locks and semaphores.
Do enough look ups on Google Trends, and you'll see that the areas that surround the Mississippi river (and inflow rivers) are often correlated with all sorts of medical diseases searches. For example, here's one for testosterone:

https://trends.google.com/trends/explore?date=all&geo=US&q=l...
Ah, but they are using Java [0] - and obviously they need a solution that works with the stack they currently have - proposing Erland at this time is asinine.

Erlang would have been solution if they have predicted the brain-dead actions of Whatsapp/Facebook, and if they had ample time to prepare - and it would still have some hard limits on a number of messages it can handle.

[0] https://github.com/signalapp/Signal-Server
Yes. Not in the mid 20th century though, that was decades before I was born.

Generally speaking, the midcentury was a rough time for railroads. The big private railway companies in Europe were nationalized by then. For your examples, lifted from the wikipedia pages:

- Denmark: World War II left DSB with a fleet of outdated and worn-out trains, and apart from a series of second-generation MO railcars and the class MT multi-purpose centercab engines built by Frichs, domestic industry was unable to provide the kind of motive power required. Instead, DSB looked to foreign suppliers. The 1960s were marked by an increasingly poor economy for DSB, leading to a steady staff reduction throughout the decade.

- Sweden: Between 1937 and 1985 no new railway was built in Sweden, except for short industry tracks and similar. Instead many lines with little traffic were closed down. Their traffic was decreasing because the car and truck traffic increased.

- The Netherlands: While the 1950s were a good time for the company, it started to decline in the 1960s, like most other railways around the world. Not only did the NS suffer from the competition of the car and other modes of transport, but it also suffered from a loss of income when natural gas started to replace coal as the main fuel in power stations and homes after a gas field was found near Slochteren. The NS had been involved in the transport of coal from the mines in Limburg to the remainder of the country.

- Germany: Transport of goods also had to compete with the ever-increasing competition from trucks. Furthermore, traditional services such as coal and iron ore shipments declined with the changes in the overall economy.
Replying to my own post because it's too late to edit and I'd like to clarify a bit.

I actually do agree that as software engineers, we're often a bit too eager to reinvent wheels. While I am not a huge fan of Java, if I owned a company, I would probably be more likely to use a JVM language (probably Clojure) than I would to use something like Haskell or Idris, precisely for the reasons you've discussed.

My overall point, though, is that often times languages themselves lag behind the state-of-the-art; there's been a lot of progress made in language design, and Java (and a lot of other languages) can feel crufty in the process. Sometimes the wheel really does need to be reinvented...if we could somehow convince the entire industry to use Lisp, this would (arguably) be a non-issue, since they allow you to abuse macros relatively easily and add language features (see CLOS or core.async for examples), but Lisp hasn't really taken over the world like I wish it would.
Python Sorted Containers
Told them ages ago, they haven't fixed it and don't seem to care. They want to be able to operate the turbines remotely and either don't care or don't understand the need for authentication.

Should add that these plants aren't big enough to cause a blackout if they are hacked, the only losers will be the owners.
Apparently, someone, or a few someones, downvoted the question before it got upvoted a bunch.
The "goodness" of Jenkins for my use-case is that the service can be a kind of "sudo" for capabilities we don't want to spread around.

That said, learning Yet Another Language that only deals with a niche requirement is a total bore.

If we can cook it down to executing some garden-variety bash in a special context, along with some spiffy pipeline visualization, that is enough.
Yes I know they're "new", but the Java time API was released 7 years ago with JDK 8. I don't think its fair to be critical of something that was fixed almost a decade ago.
> If things ever got extremely horrible, I used to have a friend that worked at google but she no longer works there. The other person I knew that works at google stopped responding to my tinder messages, so I'm pretty much doomed the next time they do something ultra crazy and I need emergency support.

Doing good for the sake of the web, even while dating, that's some next level dedication. :)
Your clients will hate you for this as you are creating false positives. Sure, Google is sometimes unethical, but calling them a malicious actor? Really?
13th Twitter-Versary
Show HN: Create Bootstrap landing pages by copy-paste
Am I missing something? Is there ever a reason to expose a CloudFront url to the end user instead of using a custom domain?
45,000 years is relatively such a blink of an eye. At the same time it’s pretty impressive to have found this painting, it’s also pretty amazing that the vast majority of human history is almost entirely unknown to us.

For scale, this reaches back in time roughly 10-15% of the way to when Homo Sapiens first emerged.

Then again, it took us 66 years to go from the first human flight to landing a person on the moon, and 60 years hence we’ll have settled Mars, solved worldwide energy generation and storage, and invented AGI.

It’s just too bad we are unable to intellectually or socially progress at anywhere near the same rate as we scientifically progress.
What’s Next, After Kubernetes?
Yet another example of people and corporations 'voting' with their feet. If your current location is hostile to your business or way of life, move. It's a strategy as old as the pilgrims at Plymouth Rock.
Correct, but the servers are not published to Internet either, there is no reason to ever do that. Cracking the VPN to get to the company intranet, that is a different story.
Very poignant observation. I have run into this as well in situations in meat-space everywhere from the DMV queue to grocery pickup.

Empathy and understanding for fellow humans is at an all time low, no doubt exacerbated by technologies dehumanizing us into data points and JSON objects in a queue waiting for the algorithm to service.

As wonderful as tech has made our lives, it is not fully in the category of "better" by any stretch. You're totally right about margins being too high, but I do hope it opens up possibilities that someone is clever enough to hack.
True that, albeit building my own wiki that has it's own feel and way of working was worth it to me. I took some inspirations from TiddlyWiki, but this space is really packed with a bunch of great tools. The ones I liked most were:

Logseq (open source): https://logseq.com/

Roam Research: https://roamresearch.com/
Maybe the router is using DFS channels and some radar station takes a reading at that time every day and forces your router to change channel on its 5GHz network.
I'm Hamza, one of the creators of Frontendor and this is some info about us.

What is Frontendor?

It's a library of HTML blocks built with Bootstrap that you can copy and paste easily to build a web page. At the moment we have blocks for landing pages and blog sites.

We launched version 1 in August of 2020 and this is version 2 that we just finished in December 2020.

What’s new in this version?

- More blocks were added (100+ blocks now).

- We redesigned all blocks.

- An online platform with a login system so we can update and add more blocks easily.

Why did we build it?

Premade templates have a lot of issues that Frontendor is going to fix:

1. Many templates come with unnecessary sections that you don't need.

1. You can't reuse their different parts (for example using the footer from template A in template B) because you can't extract it or the code is different and can't be merged.

2. License limitation (expensive for commercial use, limited projects, etc).

3. Bad UX especially on mobile.

What makes Frontendor different?

1. It fixes all the issues listed above.

2. The developer experience: most developers loved how easy and simple it is to build something by copy-paste unlike we see a lot of developers these days trying to overcomplicate everything.

3. Variety of design for each section which makes it easy to find exactly what you need.

4. You can use any block as React, Vue, Angular, and Svelte components because all that you need is to convert the HTML and Vanilla JavaScript in the block to your Framework.

The future of Frontendor.

This year we'll design the dashboard blocks and If we reach our financial goal soon, we'll move to add e-commerce website blocks too.

Who we are?

We are Hamza and Ali from Algeria. We work as freelancers most of the time and sometimes we make money from building and selling digital products.

More info:

Built with Bootstrap 4.5 (update to v5 will come soon).

We use CSS variables for customization (colors and spacing).

We don’t use jQuery in Frontendor but you can use it if you want.
A11y* Is Your Ally
Sue them for libel.
> You will not gain any results from it, though.

OTOH you lose unique factorization; it’s not a good trade.
I forked a project [1] in 2015 to remove Gradle, and it then quickly subsumed the original project, remaining under active development to this day.

There were other reasons, but de-gradling was one of the main motivations for my fork, and among the first of the major changes I made. The project is an implementation of an API which was discontinued by the original developers, but initially was built using Maven.

After switching from Gradle (which the project switched to in 2014) back to Maven, build times significantly decreased and development became much more pleasant. I found Gradle to be like a speed bump slowing down development, and reverting back to Maven was like a breath of fresh air. Simple, straightforward, and fast. Maven may not be perfect, but it does the job well.

[1] An open source Bukkit server implementation, https://github.com/GlowstoneMC/Glowstone -> http://github.com/GlowstonePlusPlus/GlowstonePlusPlus
IDK why mobile dev folks do blind retries thinking server is some kind of mage. I’ve had debates on how much retry makes sense for a login service I built. People have the tendency of hey this endpoint used to work with these parameters didn’t work? Fine I will keep retrying! The only difference here I think is in company paid job you step up immediately put in a server side fix to fix outage and then make these changes to roll them out. All of this is achieved in matter of hour or so rather than 12+ hours.

Circuit breaking, exponential backoff, bulkheading should be key pillars and no dev should be allowed to write a client without these key skills.

Edit: Please add Jitter to the list of items. Any good library like https://resilience4j.readme.io/ will give you all of this for free out of box!
I didn’t install their browser.
I had the exact same thought. Volume often detracts from rather than contributing to expression -- certainly in this case.
A bit untimely considering Signal is still down.
Smaller companies take shortcuts, that is true, but not a nuclear power plant like the bait used in the article. Smaller companies also do less damage when they are hacked.
An opinion of pure sensationalism.

It needs a particularly potent brand of coolaid to think that the thousands of people who went to do the Q-putsch somehow magically arose from "tech" giving them fertile ground.

The fertile ground was a country on the brink for more than a decade. Denying that, and trying to find "alternative facts" belong to the domain of psychiatry no less than calls to drink Chlorox.

Seeing no acknowledgement that 74 millions of US citizens decided to vote to say FU to the American establishment is a sign that bigger problems for US are yet to come.

While the version of events leading to the civil war given in popular history books try no wrap it all around the slavery, it's an incredible shallow explanation omitting complete economic domination of northern states, and bigger picture of social dynamics of the time. Saying that the south went to war "just to keep their slaves" is terribly incomplete picture.
Easier?

What's the easy way to distinguish between "malicious" and "non-malicious" files?
> We couldn't find that page, but we can work on building that back better. Back to home.
Trump says he's firing shots at china in a trade war and then the exact virus China's only bioweapons lab specializes in infects the world and the solution is to shut down our freedom and our economy. Hmm.
Yeah, it's crazy to me how common it is to just let basic dev environment polish languish.

In a small enough place, I usually will just fix whatever is slowest and most annoying about it myself.

At bigger places... good luck. Sometimes you can get away with hacking together some scripts that do things for your personal setup, but if there isn't buy in to fix the problem you're often out of luck.
Probably not your issue: Internet: Old TV caused village broadband outages for 18 months
https://www.bbc.com/news/uk-wales-54239180
Are you on a VPN? Have. You tried other networks/machines? Amazon blocks my login when I am on VPN
Clarity, the Smart Contract Language
So then it’s probably more fair to compare it to Vue without VueX included, no?
I have to add that firefox seems to be using the same logic/data for their safe browsing featureand will happily flag sites as malicious with no human oversight.
I would agree. It's not useful in the context of remediation or defense, but on a human emotional level it's extremely helpful.

When Google kills your business it doesn't help your business to assume no malice, but it may help you not feel as personally insulted, which ultimately is worth a lot to the human experience.

Humans can be totally happy living in poverty if they feel loved and validated, or totally miserable living as Kings if they feel they are surrounded by backstabbers and plotters. Intent doesn't matter to outcome, but it sure does to the way we feel about it.
I don’t know a single reputable U.S. institution that doesn’t replace your @university.edu address with @alum[ni].university.edu after you leave. I’ve been affiliated with two and have friends all over the place, including Harvard.
https://archive.is/791BY
Maybe not specific to your issue, but it took me a frustratingly long time and several password resets to realize that I had setup my AWS and Amazon Store account to each use TOTP 2FA, and they used two different codes. I occasionally need to use both in sequence to sign in.
Or you could screen your attachments for malware?
FYI the debug logs are a very curious part of all this. Signal streams them usually to a domain they keep their ownership of somewhat hidden. The domain is: debuglogs.org and the endpoint is just api.debuglogs.org.

It appears to ultimately just front for AWS S3 backend so a very common architectural pattern.
Brexit: End to Gibraltar land border prompts joy and trepidation
"The Spanish workers of La Línea de la Concepción are at the ready to celebrate the removal of the Gibraltar border controls. And they have reason to.

This small coastal town bordering Gibraltar is one of the poorest in Spain. A third of people here are unemployed and in some neighbourhoods that figure rises to 80%. Drug trafficking from Morocco and armed gangs have become a problem for police."
$50,000+ in year 2000 dollars for 142 mile range.
this is perfect.

I want to implement a new shell, but I don't like shell script.

I'd like something similar to javascript, especially being object oriented. However, I don't like event loop and call backs, that's not suitable for scripting.
Came here to post this. Extra important since they don't collect analytics!
No, it's my home address and ISP where I have been living for 3 years ( Belgium).

Also, that's not the problem. The problem is a "notification" that isn't coming during the login process.

I can enter my password.

Then I need to enter my OTP through mail.

Then a notification on my phone number ( I'm not receiving this one)
You can give it a try with obsidian.md
I hear what you're saying, but for successful businesses in competitive spaces, those last 5% or even 1% are the sauce that sets your business apart from your competitors. Of course you won't know it is until you build it, but that's what quick mvp cycles and "lean startup" methodology is all about.
IMHO, it sounds like it worked. The things you changed sound like it's made your site more secure. In the future, Googles hammer can be a bit more precise since you've segregated data.

And you don't know what triggered it. It's possible that one of your clients was compromised or one of their customers was trying to use the system to distribute malware.
There are plenty of real power plants connected to the internet today in the form of virtual aggregations of large batteries. In a decade there will be gigawatts of them online, so let's hope those companies take security seriously because it'd be simple to break things with the instant availability of several gigawatts on some circuit.
Definitely a targeted, very personal attack, as you can scam an order of magnitude more funds by focusing on the masses instead of making fake interviews, offer packets, etc.

I'd love more details, because there's not much to learn here. I walk away from the article with no idea about novel defensive strategies people need to take and no idea what we as technologists can do to help prevent this in the future.
Having gotten client-side retry logic wrong before, while also being the sysadmin responsible for keeping the server side up (back in the days of using a single dedicated server), I'm sympathetic to the Signal staff right now. We should go easy on them.
This is why you need to implement exponential backoff on retries for anything at scale https://en.wikipedia.org/wiki/Exponential_backoff
All other things being equal, I would prefer a candidate haviing Wienermobile experience over those having none.
Along the same lines, these crazy fools are making oscilloscope music, where the song itself is the visual.

https://youtu.be/XziuEdpVUe0
We spend a nice buck on Google Ads but the impact of getting your SLA-sensitive SaaS app blocked from the Internet is not compatible with reaching out to "someone who might know someone" at a 100K employee company.
I'm unfamiliar with "circuit breaking" and "bulkheading" in this context. Could you provide a bit more description so i can research them and make sure i know what i should know? :)
Obligatory reminder that companies have to go after this kind of willful trademark disregard or risk losing their ability to do so in the future. Imagine Nintendo not being able to stop a flood of low-budget Mario games, which would be very confusing consumers, because Nintendo decided to let some indie devs infringe on their trademark.
I see the status page [1] still says they are having technical difficulties, but a group chat I’m in with people spread around the US and internationally seems to have been working fine all morning.

[1] https://status.signal.org/
Yeah, foam isn't a great option for cross platform (mobile).

If you use an iPad and have your notes in a GitHub repository you can use code spaces which is the vscode editor (I'm not sure if the extensions will work though)