skysight-inc/HackerNews huggingface dataset:
Why actually and not just confirm? Also, investing in something internally means absolutely zero as none of those investments seems to have paid off so far, since there has been absolutely nothing deployed or done by Amazon in public to fight the review spam.
Installing Non-Universal Homebrew Packages on Apple Silicon
> Notably, one of the criticisms at the time was that Bloomberg didn't name credible sources with first-hand accounts of the events — understandably given the sensitivity.

Wait is this all of a sudden a prerequisite for something being believable?!?!?! What the hell did I live through since 2016?
Jesus Christ. What's even the point of a 5-star system then? It should be a very simple two option system. Was the ride safe? Did you get where you were going? Then hit the thumbs up button. Otherwise hit the thumbs down button. Or even better, no rating system at all and just provide the option to file reports in bad cases, with that report information being made public in some sense. This idea that rideshare drivers need to be offering entertainment while they drive in order to ensure 5 stars is offensive. When people took cabs, nothing like this happened. A cab pulled up, you got in, they drove, if they tried to take a long route you complained, then you paid your money and got out. End of transaction. Most were good, some were bad. The fact that the cabbie was able to hold and maintain their job was the source of trust you needed to have confidence you would arrive intact.
The consultant straight up admitted that he presented his hacking scenario as merely a hypothetical example. This all got embroidered by an unethical journalist looking to make a splash by "moving markets".
Yes! That rock band came to my mind, having read about them here at HN. But I couldn't remember the name (Van Halen, see below) or "brown m&m".

Now, because of your reply, I found this old HN post:

"Why Van Halen's tour contract had a "no brown M&M's" clause"

https://news.ycombinator.com/item?id=7754334
I guess you're asking whether now that the JRE no longer exists [1] and some people choose to distribute other kinds of Java runtimes and call them "JRE" (different runtimes named JRE from different vendors are not the same), is that an acceptable use of the term? I don't really care as long as people understand, one, the difference between the JRE and any other Java runtime, whatever they choose to call it -- I will use the OpenJDK terminology, though -- and that two, OpenJDK discourages the use of runtimes managed by third parties on non-developer systems and such users shouldn't be encouraged to install one; a runtime shared by multiple applications and managed by their vendor is perfectly fine (as is deploying an application intended for developers as a JAR and relying on them to use their JDK's runtime to run it).

BTW, the JRE was desktop software. For the server, there was a "Server JRE" (https://www.oracle.com/uk/java/technologies/javase-server-jr...) which is, indeed, much more similar than the (desktop) JRE to the various server runtimes various vendors now call "JRE".

[1]: Technically, OpenJDK has never had a JRE because the JRE has never been open-sourced, but now that Oracle has open-sourced the entire JDK and discontinued the JRE entirely, there is no more a popular JDK that isn't an OpenJDK build (although there are not-so-popular JDKs that aren't OpenJDK, like OpenJ9), and so the popular Java implementation no longer has a JRE.
Thanks for the link. Honestly one of my goals is to avoid becoming too dependent on on proprietary clouds. If I wanted something that only works on Amazon, there's always ElasticBeanstalk/Amplify & friends.
I change the sort URL parameter from &s=review-rank to &s=review-count-rank and tend to put more weight against products with thousands of decent reviews; if nothing in the category has hundreds of reviews, that's a sign to look elsewhere. Perhaps false optimism or a flawed heuristic, but seems to work out for certain categories of stuff.
Maybe OP should try using JQuery.
Deliveroo targets 8 March for bumper IPO kick-off – report
I’d like to believe that they truly see the long term financial value of building more customer trust, but I can see this being a bit of a back burner project due to short term losses
> Can anyone show us any code? Or an actual chip? Cool infographics don't cut it for me after the first time around with this.

Amazing how the level of evidence required for this is completely different and significantly higher from almost everything else that dominated the news since 2016.
I'm part of a 4 man team that maintains a 1.3 million loc application in the PropTech industry. It's been jazzed u with a WPF front end I can compile all 1.3 million loc in 11 seconds on my work laptop using Delphi Xe7.

The rest of the form has gone web but moving 1.3 million LOC would be a 10 year project we estimate. So it's not happening. Customers love it and thats what matters.
Your last statement is based on exactly zero data points.

Let me provide one counter though: I couldn't give a rats ass whether you outmanouver me financially, I do care whether my child has a livable planet for his lifetime.
The generators can't work in this kind of cold weather.
What is the relation between drugs and hair loss?
Hair loss is normal to an extent but substance addiction can boost the amount of hair you are loosing everyday. Substance addiction can cause telogen effluvium which is a hair loss related disease. Hair loss can be due to any trauma, mental health disorders, physical health issues, improper diet and when it comes to drugs, hair loss can be related to it.
https://landmarkrecovery.com/drugs-and-hair-loss/
Right. The sq cli does not have an subcommand to add new subkeys to an existing certificate. But it can use such certificates, and when it generates a certificate, it, by default, generates a certificate with subkeys.

This functionality will, of course, be added to sq (it is possible to do this using the library). We just haven't gotten to it yet. It's not that the functionality is hard to implement. But, we want to have a clean CLI, and there are many possible options. We want to expose them in a sensible way that does not overwhelm the user.
> The JAR is still there, though, in the package.

Fair enough, assuming it's easy to extract that eliminates my big concern. As a user of a less popular OS I worry about the jar-based flow becoming a second-class approach, but I do appreciate that having a first-class way of distributing "native" executables is important.

> Although I'm not sure why you'd think that a long-abandoned piece of software is more likely to run an a much later runtime than on its own embedded one.

The point is that the jar<->jvm interface is a lot more stable than the jvm<->host system one. I suspect old JVM binaries would have linking issues (e.g. libc SONAME) or might not even be the right architecture to run on my current machines.

> Ah, but that attack surface is smaller thanks to jlink. An application only distributes the runtime modules it actually needs.

Sure, but things like low-level parsing are used by the application. It's not quite the same thing, but I maintain a couple of projects where approximately 100% of the security notifications I get are about vulnerabilities in Jackson, not because it's the majority of the library surface but because of what it's doing. Obviously Jackson isn't part of the JVM, but for an equivalent project that was using XML or CORBA I can easily imagine most of its attackable service being JVM code that the application really does use. There's also things like JMX which the application may well want to include even if it's not directly invoking it, but I remember as being a significant source of vulnerabilities.

> The author of such an application would use some library that adds auto-update for the application (or just its runtime).

Wasn't that the point of Java Web Start links? I usually favour leaving things up to libraries, but at the same time things need to be secure by default.

> But I think that the belief that most attack vectors are due to the runtime rather than the application or its libraries, at least when it comes to servers, is less reality and more wishful thinking. The monolithic runtime in the JRE was both large and heavily studied, so there was a good stream of vulnerability reports, but that doesn't mean it was any less secure than your own application; it could have just felt that way because the application's security wasn't as well tested.

I actually agree with that - most of those old applications probably only have security by obscurity. But still, there's a significant practical difference between "theoretically vulnerable" and "has a one-click prepackaged exploit". So encouraging every application to ship a static copy of the same chunk of well-known low-level code has a significant downsides - any vulnerability will become the equivalent of that zlib double free where essentially every MacOS program had to ship a new version.
I think for generic sizes Amazon basics are fine. Costco is also good for routine sizes. It's the more exotic/industrial sizes that get tricky.

It's hard to attribute the lame search and sorting to incompetence at this point, it's starting to seem more like active malice.
I found Revel to be quite similar.

I would say it is as productive as rails too.

There is no ActiveRecord and way way less magic which slows (initial) development speed but it pays off in less bugs to fix.

So overall development speed is roughly the same. But with Go you gain co routines and nice performance which can make life a lot easier.

Gos type system, while somewhat poor, still helps too.

The worst part of the whole thing is actually the weird Go std lib templating.
Even older. It's the Windows follow on to Dos Turbo Pascal which existed from 1984.
NodeJS has even more "batteries included" frameworks than Golang. Sails, Hapi, NestJS and Adonis are probably the most popular right now, at least from my viewpoint (traditional SaaS web development)
Amazon has become one of the worst online shopping experiences, only redeemed by their 1 day delivery

Most of the items are now people selling cheap tat from AliExpress and so many items have a suspiciously high number of reviews for such mundane items
Side note - for those HN readers like me who had never heard this term "Cargo Cult" before, here is a quick Wikipedia definition:

> A cargo cult is a millenarian belief system in which adherents perform rituals which they believe will cause a more technologically advanced society to deliver goods. These cults were first described in Melanesia in the wake of contact with allied military forces during the Second World War.

Personally, I'm still trying to wrap my mind around the implied context here.

Sorry it's slightly off topic - but perhaps someone can clarify?

Thanks :)
What is back end development in simple words
Show HN: Connected Markdown notes with spaced repetition
It'd be great to see it deployed in at least 1 national network but TBH no Telco is going to implement it as they're bound by the law to provide lawful interception.
I'm successfully running Emacs natively on M1 using the Yamamoto fork. It just needs to be installed via the formula on Homebrew currently rather than the cask.

https://github.com/railwaycat/homebrew-emacsmacport/issues/2...

Haven't run any benchmarks yet, but general usage is snappier and startup time is around twice as fast as a gccemacs build running on a 2020 Intel MBA.
Author of Rich here. Happy to answer any Rich related questions.
Regarding text UIs close to the metal, that made me think of this short (1 minute 20 seconds) segment in a recent video by The 8-Bit Guy on YouTube [1].

In it, Mr Murray live-codes a simple program to display all 256 characters in the C64's character set, by directly poking them into video memory (that's close to the metal, right?).

Once in BASIC, and once in machine code, to show the contrast in speed. It's pretty impressive even now, and that's running on a 1-MHz 8-bit processor. :)

[1]: https://youtu.be/HWpi9n2H3kE?t=521
how do you load 40GB of data into a device having only 16GB RAM (or do you mean 40GB csv which goes down in size when parsed machineusable?)
Gitea
Network effects. If you're a darkweb seller you know most people want to send BTC they purchased straight from a KYC'd exchange, this is preferable as any extra friction is bad for business. You would lose 70% of your customers if you only accepted monero, which has been delisted from any exchange with a fiat gateway. You can always switch the funds into Monero later on anyway to save your own privacy. Your customers being pwned for using non-privacy coins doesn't matter, so long as they only lead back to your darkweb nickname.
I would love to find an MVC framework with the extense library support of Rails but for Javascript. Being able to simply `gem 'devise'` and have full authentication at your hands (including views, email templates, etc) is a godsend.

At many places where I've worked at this paradigm is exactly what is needed, but people know and want to use JS. If we choose to go that way then, we need to write a lot of glue code and think about setting up architecture standards, folder and naming conventions, ORM support, authentication, job queues, etc; all of this comes by default with Rails and makes life so much easier.

Lately some options seem to be gaining steam:

* RedwoodJS [1]: by Tom Preston-Werner (founder of Github), comes with React and GraphQL baked in, pretty new project though

* Next.js [2]: brings a lot of nice conventions to the frontend, but still some things missing on the backend side

* SailsJS [3]: similar to Rails, but small community

* Strapi [4], hapi [5] et al: plenty of backend functionality, but frontend agnostic.

Has anybody had experience with any of these (or others) and can report back?

[1] - https://redwoodjs.com/

[2] - https://nextjs.org/

[3] - https://sailsjs.com/

[4] - https://strapi.io/

[5] - https://hapi.dev/
This video by Captain Disillusion [1] and this bonus clip [2] seems worth mentioning in this thread.

[1] https://www.youtube.com/watch?v=aO3JgPUJ6iQ
[2] https://www.youtube.com/watch?v=807rSw8wyGA
Bitcoin can be a cautionary example for what happens when development grinds to a halt because of internal power struggles.

Today, bitcoin's underlying technology is unable to evolve, other crypto currencies have surpassed it and bitcoin will probably be taxed or outlawed due to its contribution to climate change.
It's not a forgery, it's a painting made for very different tastes than ours
I bought a board game from amazon recently and it was really poor quality and it was only when I checked on the manufacturers website that I realised it was fake.

When I went to report it, the seller had been removed and the item was no longer available.

I contacted support and of course they refunded me the money without any issue.

My problem is that they knew they had shipped me a fake product, why didn't they contact me to to tell me it was fake and either send me a real copy or offer me a refund?
Dropox chose Apache Superset as data exploration platform
Copying images without pulling it using containers/image in Go
Update AWS Lambda Function Code with AWS Cli
Rust has several interesting TUI libraries too.

Check https://github.com/fdehau/tui-rs for example.
In other words it is just a regular object you serialize from time to time...
As a British person who has been living through Brexit for years now, I am acutely aware of the difference. When Brits talk about whether they're in Europe or not it's always with reference to the EU. That's the one that actually makes a difference.
Invoke an AWS Lambda Function with AWS CLI
Same. I thought if you bought directly from Amazon instead of a third party seller, then you'd be safe from counterfeits. But it turns out they just mix all the third party stock in with the first party
https://sellercentral.amazon.co.uk/gp/help/external/G2001414...

So now it's not safe to buy SD cards and USB sticks directly from Amazon either now
Recently I received a lot of e-mails from VCs that seem to be auto-generated and that just rephrase text from our website. So far none of the VCs admitted this of course, pretty sure though that they don't write those by hand. Not sure if those are based on GPT-3 either, but the timing might indicate so.
A lot of reviews raise a red flag in my mind. Particularly, for products which are new. I’ve been burnt with counterfeit and low quality products with a large number of reviews.
https://news.ycombinator.com/item?id=8863

Have to link to that because I chuckled at your post.
Nope. Plus these headphones sound actually very good (compared to my roommates high end cans) and they cost $50. If they break I can fix em. It’s kind of going for the opposite of AirPods. Anti-disposable.
As an economics grad, I always wondered why online reviews existed at all. There's no skin in the game for anyone.

If your neighbor recommends you a crap lawnmower, he'll have to explain to you why he thought it was good. You can ask him questions and compare his motivations to yours. He'll also end up living next to a badly mowed lawn if he doesn't put some work into it.

The seller has every reason to pay people to write good reviews. He doesn't even need real people, it's the internet and you can invent people, complete with their own unique photos and profiles.

Basically, honesty is expensive and cheating is cheap. Why would we trust it?

My personal experience with Amazon is that it's the shop to go to for stuff that is ok if it is broken. If I buy a cable for £10, and there's a 10% chance it's faulty, it's not a huge problem for me. The other use case is where the guarantee comes from the brand. I'm not sure why but I tend to think if I buy an iPhone on Amazon, it will be the genuine thing from Apple, and I have history with Apple apart from Amazon reviews.
"Customer's choice" is a strange word to use for people who are not purchasing anything.

The loud, insane voices on Twitter and other social media demanding cancellations are rarely purchasers of products/speeches/people they attempt to cancel.

Ideological mobs are not customers, they are censors.
Thanks for the recommendations! I already played Spirits, it's really nicely done, adds something original and works well with a touch interface. Of course I also tried Pingus, but while it's a perfectly competent Lemmings clone, when you play it you realise that Lemmings was about more than the novel concept - the whole package of animation, music, sound effects, the humour etc. was far more compelling than in Pingus (for my taste of course).

I would also add "World of Goo" to the list, in case anybody missed it.
Amazon stock is commingled with marketplace sellers, so even buying directly from Amazon isn't a guarantee that you're not getting fakes nowadays
https://sellercentral.amazon.co.uk/gp/help/external/G2001414...
That seems like an oddly specific thing to assume when suggesting it for use by static websites generally — afaict most static sites would see no distinct benefit from columnar storage.

That said, SQLite for OLAP is very neat.
Wait? Your can for example put an unicode string into integer or number columns? That can‘t be true? I mean, really? ...
I recently received a mass CCed email from an Amazon seller to 70 other customers (hello GDPR?) offering free products in exchange for 5 star reviews. There's no proper channel to report this. Tried to leave a review with proof of it and it was denied. I really get the feeling Amazon are ok with it.
The problem is that politicians are not trained in every possible domain and don't have the time to really get into the intricacies of, say, Artificial Intelligence. So they have to decide what is allowed by using a simple heuristic - the flow of money and votes of people. As long as people do not complain, money wins. The problem is of course, always, (see climate crisis) that when the people start crying out, the damage is done.
I fail to see how a $500 Intel NUC could possibly justify a team of software engineers to maintain, which means the person responsible for setting it up is not a manager, and their boss isn't someone who manages a manager.

The purpose of an employee is not to jack up the stock price, it's to make their boss look more important. Shareholders are like customers, it pays to have them think you're on their side, but your interests do not always align.
Non-FAANG: https://goo.gl/X45Dtt

The salaries at the bottom of the spreadsheet with a timestamp >= 2021/01/25 are from senior people, as they resulted from the survey being posted to /r/ExperiencedDevs: https://www.reddit.com/r/ExperiencedDevs/comments/l4qns3/ask...

Keep in mind that the salaries are self-reported without a way to verify them. Hopefully, most people are being honest.
Following Rubocop's Ruby Style Guide [1] to the dot helps a lot with this, and it's quite easy to enforce using the rubocop gem + a GitHub action

[1] - https://github.com/rubocop-hq/ruby-style-guide
Redhat used to ship running pop2, pop3 and imapd running by default, all open. Windows was SO exploitable that ISPs to this day block 137-139 and 445 just so people do not get hacked immediately.

Par for the course was to get owned within hours (or minutes) if you were on the net, that was the context where not-getting-random-remote-admins was a differentiating factor.
Personalization the “must-have” for online shops
Use a different chrome user profile for just this site?
Do you or any one else here know of any other podcasts that are as 'unapologetically technical' as this one? It was very enjoyable, and I've now got an urge to listen to similar experts in the field of STEM that don't dumb it down for the listener as much.
do you find benefit in dynamic cruise control in slow moving traffic. Now add the lane centering logic and you dont have to apply a lot of torque on the wheel either, because the system does adjustments for you.
pay for value not area code
The Donner Party
> They can be made on a partly intuitive, impulsive level, without clear conscious awareness. But this doesn't necessarily mean that you haven't made the decision.

The only thing this shows, IMO, is the mental gymnastics human are willing to go through in order to keep a feel-good notion that it is, in fact, some you that makes the decision. Since you are the entirety of your physical being, which extends via physical interactions into the rest of the universe (and thus has a very fuzzy border), of course there is some fuzzy, handwavey definition of "you" which could be said to have "made" the decision.

That doesn't bring us any closer to having the kind of agency people have traditionally ascribed to the term "free will".
82MB... that's not quite in "the same spirit" :)
The solution is the same as in many other programming languages: adopt a coding standard and enforce it in an automated fashion, i.e. in the CI/CD pipeline. Code style then becomes mostly a non-issue and not an object of discussion.

In the case of Ruby:

* most popular style guide: https://rubystyle.guide/

* automated tool for linting and enforcing code style: https://rubocop.org/
It is clearly insufficient and I do not care why Amazon failed.

Amazon had 21$ billion income ( per https://en.wikipedia.org/wiki/Amazon_(company) ).

50 people is nothing for them, and it is basically ignoring problem.

Also, can you provide evidence that they have any people working on the problem?
Well, calculating one hash will not result in any bitcoin either. We're at 145 EH/s (10^18) and a block is mined average 10 minutes on average.
Related: https://www.infomigrants.net/en/post/27910/inquiry-into-uber...