skysight-inc/HackerNews huggingface dataset:
I might be missing something. Isn't the report solely about the neutralizing capabilities of the Moderna vaccine? What other vaccines were tested?
> temporarily granted access to a file or directory on a process-lifespan basis when that file or dir is fed to that app through the file browser or through the application's "open file" file dialog box.

I’m not sure if it’s temporary or process-lifespan basis, but AFAIK macOS’s sandbox does have a model where the user must grant access by using the system-provided out-of-process file dialog for the application to be able to access the files.

Pretty interesting. For an example, try renaming a file in MS Words by clicking on the document icon — you’ll see MS office asking for permission for the access of the parent directory. (Apple does provide rename functionality by it’s APIs, but MS Word does it by it’s own, which requires the permission.)
Very good point. Often I think the hardest part about being an EE is using our CAD tools.
He should have just done the twitter imposter bitcoin giveaway thing. Make $27-50/k in a single day completely undetected, no SEC getting involved. one guy made $500k. Anything having to do with insider trading is going to be full of feds, no matter how small the $ is or how accurate or inaccurate the tips are. One of the worst ways to make money, either trading from insider info or selling it. Same for the dark web, which has probably more feds than actual users. Smart internet criminals stay away from onion sites.
Cool, I saw your site in the new page.

Do you have an example of what a "next action" could be?
The pitch of this project is not great imo.

Not sure saying it's an open source table is any better but calling it a tool for keeping projects on the go is also just weird.
Posting this because I never thought what happens when you start applying control theory at a country-wide scale.

Also making an analogy to fuzzing. Can you fuzz Congress?
I think I follow now.

Source availability is preferable but it will take a while to become normal. It will be even longer bit-for-bit reproducibility is a commercial norm.

SBOMs still give us value in the meantime. If I buy product X, which asserts using dependency Y, then when a vulnerability is asserted for Y, I can pester the vendor to show that they have updated.

At this point if they claim to upgrade but haven't, that becomes fraud. The economic incentives vs our current anything-goes world are differently weighted.
One never knows what the future may bring.

Long-lived OSS software is a relatively stable bet, but the point still stands.
that's an interesting take, what would you consider strawman arguments in the article?
I’m totally part of the problem! I actually had that theory that most people in SF are just temporarily here to get as much money as possible before leaving. Knowing that why would they try to improve anything? To improve homelessness you need both a national effort and a local effort. Both are embarrassingly small compared to the seriousness of the crisis.
I think that GP's point still stands. Application security on most native platforms right now is a disaster. But application security on Linux is a dumpster fire. Yes, there are ways to do it better with SELinux, yes there are ways to isolate apps, but they're overcomplicated, inaccessible, and the end result is that most consumers don't use them.

Flatpak, for all of its many faults (and there are a lot of them), is still a strict improvement over the current security model running on most desktop Linux computers. Sandboxing native applications (even partially sandboxing them) is objectively better than the status quo.

It is embarrassing that the Linux community is still having this debate. It is exhausting, it feels like the community has to be dragged kicking and screaming away from a 20-year old security model that every other platform has moved on from.
> Main line of work (web) stalled but I picked up a solid amount of drone photography/videography work

Do you mind me prying into what field you’re doing drone photo/videography in?

I’ve done drone surveys before and always thought that that would be cool too, especially when combined with travel.
I love this because I need, like, two LLCs per year for random, probably short lived, things.
All the things like flatpak annoy me because I have a gut feeling that capsicum is the most incremental change to unix that is both secure and ergonomic, and all these other things sacrifice one or both of those with tons of complexity.

Just abandon the epicycles already!
Honest question: if you don't do dependency inversion, or if you don't depend on interfaces/abstractions that can't be mocked - how do you unit test your code?

Unit testing is the only reason pretty much all of my code depends on interfaces. Some people seem to consider this a bad thing/over-engineering, but it's how I've seen it done in every place I've worked at.

How do you do it?
I'm curious what other people think when they take over your code? We all have a bias to think our way is simple and obvious, yet it rarely works that way in practice.

Abstractions are a way of trying to find a common ground conceptually. Agreed, abstractions should not be multiplied unnecessarily, but in the same way it's easier to learn Newton's Laws than read Kepler's data, a few well chosen abstractions help others organize and understand what's happening in a code base.
Yes, I made it up just now.
WHO Covid-19 Vaccine Updates March 16 2021 [pdf]
FYI this is not referring to TBL’s SOLID project
Some of the points the author makes are good, but some are severely misguided. An example:

> The Single Responsibility Principle says that code should only do one thing. Another framing is that it should have “one reason to change”. I called this the “Pointlessly Vague Principle”. What is one thing anyway? [...]

If a change request comes in to change the format of the logs to include milliseconds and you're running a search and replace over the code base, you've broken the SRP. We can argue that is a good thing or a bad thing, but that's what it means. I think it's a bit of both, a trade-off, like most things.
The author rejects "Single Responsibility Principle" as “Pointlessly Vague" and offers instead the “Fits In My Head” principle. That is apparently better due to some hand wavy discussion which leaves no room to explain why same hand wavy justification would not apply to original.

stopped reading after that.
Running a Bakery on Emacs and PostgreSQL (2019)
you should talk to a journalist
What cancer do you have?
(Also have you been looking outside mainstream cancer treatments?)
Just anecdotally, I used to work with a lot of dynamic languages, and in static languages I don't miss the dynamism at all. But when I go back to dynamic languages, I miss the type checking a lot.
This alludes to one of my main beefs with SOLID - the lack of a clear definition.

What counts as a "responsibility", for instance. Where I see one responsibility some people see two and vice versa.
Hi Arjawn. Congrats on the new business, its a well needed area. Do you have any thoughts on StartPack vs Firstbase.io and Stripe Atlas?
Part of the glamor is demonstrating your dedication to work and productivity. These jobs have long been reputed to be all work, no life.

They want to cap it at 80 hours a week. Still not a life that most would sign up for, certainly not as societally useful as the long shifts for medical residents.

On the one hand I feel bad for them, on the other it’s GS they signed up for and I feel little sympathy for anything related to GS.
Hey! thanks so much, I'm super curious (if you're able to share publicly) what you form your LLC for?
To be clear, my position on "next Detroit" is

> rising and falling in step with the industry it's built around

The tech industry is definitely still rising
> If something is punished heavily people will be more reluctant to do it.

That's not exactly right. Effective deterrence has more to do with the certainty of punishment than the severity of punishment.

> To provide justice to the victims.

Agree 100% here. The justice system is a tool of the people, and if the people believe it is ineffective they are far more likely to take matters into their own hands. In a civil society we definitely don't want that.

In the US we definitely have trouble with #2 however. Maybe some of our puritan roots. Punishment is more important than rehabilitation. And we stack the deck against ex-cons and make it very difficult for them to successfully return to society and be a productive member.
I'm very interested to learn what you are saying.

Can you give an example ?
I generally am very willing to trade compile-time speed for safety or runtime speed. One case I can think of where I wouldn't though is experimentation, where I need to experiment with a built artifact. For example, sometimes I want to run code in a dev environment to test it without building and running an entire microservice graph, and there I feel Scala's slow compiletime rather acutely (even when skipping other steps like checkstyele, unit tests, and integration tests).
"The Selfish Gene is a popular text ... among a certain subculture but which isn't mainstream as far as I can tell."

"broad academic or even intellectual credibility"

I see what you did there.

I don't see a problem with memetics being non-mainstream in the way it's described here. Sure. If you want a job doing something called _memetics_. If you want to gain clout and respectability among your peers for illuminating some dark corner of the worlds problems with your writing, memetics is not going to impress anyone.

I say, More ideas the better!
no thanks. It's pretty orthogonal to the conversation about sandboxing.
For 2-3 years or more, the reviews on Amazon for windows 10 have said things like the below, despite the description saying “by Microsoft.” One of these is an “Amazon’s choice”

> Did not activate. Microsoft support confirmed the key was already used multiple times.

> THIS IS NOT FOR RESALE! single use.
This is an OEM Copy that is given alongside existing systems so that way a user can upgrade their motherboard / hardware and still use the same code. it violates the TOS for the user to install / use it.

> Bought this for a brand new computer build. Activation could not be performed as number is blocked by Microsoft. I contacted Microsoft customer support, my product key has been activated OVER 20 times and has been flagged for abuse!!?? I also have a "NEW" Windows 7 pro that will not activate that I bought off Amazon... guess what Microsoft said about it.... not happy.
I think it’s less likely as housing trends towards unaffordable.
One day you too will move somewhere else, and realize that either you love it or that it’s pretty bad and... think “why should I try to improve this place when I can just move elsewhere?”
>One never knows what the future may bring.

Exactly, so make the changes when you need them, otherwise you are relying on hitting the abstraction lottery
> Shouldn't we expect long-established and well-respected VCs to do a very heavy due diligince, both initially and continously to ensure something like this doesn't happen? I mean, the VC brands are used as a stamp of approval.

You must be new here.. shrug
I hate to admit it (and it truly does pain me), but anything casual will be on a mobile platform. Anything on the web should just be ported to the mobile space.

The rise of web games, way back when, was to blow off some steam at work. With the rise of monitoring software, that niche has been filled with mobile games that can waste time at work, on the bus, on the toilet, at the dinner table and while watching the television.

Flash games are where I started making graphics and learning programming, so this is a wonderful introduction for younger people to programming (Godot doesn't come with a suite of drawing programs like the stolen version of the Adobe Suite that I "liberated" as a script kiddy a thousand years ago). They can readily host them for cheap or free and show them to their friends, but as for business viability, you're very right.

Apologies for the length of this.... it kind of got away from me =)
Maintaining database abstraction layers and the like is a real option used to hedge the risk of the holdup problem. But like any real option, it has a carrying cost. That means it's an economic question, there is no purely technical rule that can give you a robust answer to whether or not to abstract something away.

I feel the industry has a long hangover from the 80s and 90s in terms of the holdup problem. Oracle, basically, created a massive externality of anxiety about vendor lockin that continues to impose drag to this day.
Understanding and Responding to the SolarWinds Attack: The Federal Perspective
Self-hosted, low volume or demo installations can benefit from a lightweight database (that is also in-process, so the user does not have to install and maintain it) like SQLite, H2 or Derby.
I have 4000 tabs hoarded anyway.
I'm guessing you are simply not the intended audience. And not everything has to be "useful to the open source community." Is it useful to those learning Python? That seems more like what she's after, and it appears she is seeing some success that would sensibly be showcased on her LinkedIn page.

I looked in her Youtube-Projects folder, and it looks like she covers a lot of ground with interesting ideas for people wanting to learn python with purpose. It's not the boring Hello World with different conditional loops that everyone else likes to churn out en masse.

Also, the LeetCode stuff is quite cool. I don't really see where the dismissiveness is coming from.
New to SV VC, sure.
The intentions are good, but I see some immediate problems:

For one, there is no guarantee that someone on that subreddit will have purchased the same product on Amazon. This is especially an issue because reviews will become more important for products that are more niche or bought less frequently.

Secondly, the user base of the subreddit will be small unless you can make a convincing argument for why Amazon reviews are broken. Then you have to get that argument in front of a large number of Amazon buyers.

Finally, because of the small user base, this will be easier to game than Amazon reviews because karma is easier to spoof than buyer reviews. Someone could become a big fish in the small pond of the subreddit and influence more purchases.

It might be a good idea to reach out to some consumer watchdog groups to help with getting some traction under this project
Quantum Computing Ethics and Hype
In 2000s I really liked Glade for Gtk+
This is video is really aimed at kids but gives some good explanation of why it's likely impossible: https://youtu.be/YkS1U5lfSRw

The "gears" on this insect are basically intersecting teeth on two otherwise normal leg parts. Evolving an axle or any other free spinning part would require disconnected parts. The external parts would be cut off from any metabolic functions of the main body. Nothing remotely like that has ever evolved before so it would be nigh impossible.
Yes, but if each of your neighbors is also getting a package each day, then the effect is still the same. Additionally, that fleet will eventually be electrified, much sooner than all of those family SUV’s will.
I'm surprised he wasn't selling a Norwegian Blue.
it's space-x, not google. the salaries are probably not that great, especially after taking into account living expenses . $20k in net profit is a nice even for an engineer.
YC Backed!
“The Single Responsibility Principle says that code should only do one thing”

Except it doesn’t really say that. Without understanding the S, the OLID is bound to seem like mindless pedantry.
Leonardo da Vinci was likely one of the most intelligent humans ever to have lived, and didn't understand calculus. It wasn't for lack of interest, either! He was fascinated with parachutes, timing falling objects and trying to understand the rates of change. But despite nibbling at the edges of calculus, he never got there.

In contrast, it's now completely ordinary for a teenager to not only get to the core ideas but solve complex calculations with them in timed tests!
How to Debug Jest Tests in Terminal
To me this blog doesn’t really formally/finally refute anything, but is simply saying “don’t over-engineer your solution”.

> “dependency inversion has single-handedly caused billions of dollars in irretrievable sunk cost and waste over the last couple of decades”

Oh please. Is there anything in programming that hasn’t had the “Irreparable harm to humanity” sticker attached to it by now?
It's rude to call someone incompetent at their job. Unless they overlooked corruption, in which case it's rude to call them competent at their job. How odd.
That’s one of the traps, every programmer will fall into at least once: copying some abstraction because someone else did it. I have not seen support of changing underlying DB as a business requirement yet (well, outside of frameworks and platforms, of course). I have seen many times when developers designed architectures, created APIs or added buttons to user interfaces, because they felt it may be useful in the future, not because someone told them it will happen. That code was very different in quality, sometimes too abstract, sometimes a big multi-screen function doing plenty of magic. All of it had nothing to do with SOLID — it was always a violation of another principle: KISS. Keeping it simple, an engineering variant of Ockham’s razor, does not contradict or replace SOLID, it complements it, defining the scope of application of other principles. If your requirements are complex enough, you may need an abstraction — if you really need it, here are some guidelines. That’s it, now keep it simple.
I agree. In a way that's one of the strengths of SOLID in my opinion. All places I've worked at had slightly different versions of what e.g. SRP meant. And that's ok. It's a way to make sure your team writes code in a way their teammates would expect. Whether that's objectively good code or not doesn't matter as much to me.
Most favourable assumption: They have a policy to remove companies from their network and site that violate certain rules - like fraud.

Least favourable assumption: They are doing damage control with their association. This article does not even mention Y Combinator initially funded them.
Bought a new book or toy for my kids once per week. They look forward every Friday to getting something new. I enjoy seeing their anticipation and getting to read something new to them that weekend.
I don't really see the downside (oh yeah, planet's burning, but as the dog in the cartoon said, this is fine), if some rich jerkoffs buy it then Cleese can put the money into charity. I suppose one downside is that the NFT ponzi peddlers can now say "See, we're legitimate, even the founder of Monty Python is here!", but Cleese's comments about terminal insanity isn't exactly support.

I suppose everyone knows the emperors are naked, but hey, it seems like that's not stopping megabucks being made, and why should you miss out?
Yes, let's abstract the database is probably one of the most mindlessly applied rituals in an enterprise software. And if running on different databases is not a feature of your application, it is mostly harmful practice.

If you can decide on a language, framework, critical libraries etc. then you should be able to decide on a database. It's probably more important than your application anyway.
Decoupling your data model from postgres because you "might" need to swap database is a bet I've seen taken many times but it's never one I've seen paid off.

This is a clear example of where YAGNI applies, I think.

Extra work plus extra boilerplate to maintain. No payoff.

That said, extra code + boilerplate is a great way to treat riskier software.
Probably the majority of tips do not yield much profit. The problem takes cares of itself in that as the information becomes more public, the market adjusts accordingly.
I hope it backfires. One example could be that the Linux community creates functions and program names that purposely collide with Microsoft’s extensions, and in that way extinguishes Microsoft.
Just because other things are also bad for you does not mean that porn isn't bad for you. It's established that it is.
He meant running Emacs on the remote server which IMO is even better than using vscode's remote plugin.
> Silicon Valley's failure is in being unable to diversify effectively from a failure in city-building.

What if it's the other way around? Public school didn't teach me about the Second Great Migration of black Americans westward during and after World War 2, and I was unaware that there was basically zero black population here until then. Check out the first graph in particular in this article: https://belonging.berkeley.edu/racial-segregation-san-franci...

It's impossible for me to ignore the time correlation between these demographic changes, the civil rights movement, and the birth of California's various anti-housing policies like Prop 13. All the houses in my area of San Francisco had racial deed covenants making it illegal to sell them to non-whites, and this was new construction in the 1940s and '50s! That obviously became illegal in the 1960s so segregation became economic, locking in existing segregation by pricing out newcomers and letting existing residents pass homes to their kids down with no tax reassessment: https://fred.stlouisfed.org/series/OEHRENWBSHNO
1. Watching the tech community over a really long time, please guys, don't swing violently from "A is all good!" to "A is all bad!" It was good for something, else so many people wouldn't have successfully used it for so long. Work more on discrimination functions and less on hyperbole please. Future generations will thank you for it.

2. "...coupled with the way most developers conflate subtypes with subclasses..." Speaking as somebody who both likes SOLID and could write this essay/present the deck, I think there's a lot of confusion to go around. There are a lot of guys coding classes using rules better suited for types. There are a lot of guys applying OO paradigms to functional code and vice-versa. In general, whenever we swing from one side to the other on topics, it's a matter of definitions. There is no such thing as "code". There's "thinking/reasoning about code" and there's coding. You can't take the human element out and reason abstractly about the end product. Whatever the end product is, it's a result of one/many humans pounding away on keyboards to get there.

3. My opinion, for what it's worth: as OO took off, we had to come up with heuristics as to how to think about grouping code into classes, and do it in such a way that others might reasonably get to the same place ... or at least be able to look at your code and reason about how or why you did it. That's SOLID and the rest of it. Now we're seeing the revenge of the FP guys, and stuff like SOLID looks completely whack to them, as it should. It's a different way of thinking about and solving problems.

ADD: Trying to figure out who's right and who's wrong is a (philosophical) nonsense question. It's like asking "which smell is plaid?" Whatever answer you get is neither going to provide you with any information or help you do anything useful in the future. (Shameless plug: Just submitted an essay I wrote last week that directly addresses reasoning about types in a large app)
Hi, Does Alibaba already use it? Lots of good stuff in it.
> The problem is that every desktop program must be rewritten to support this idea

No, and expecting that to work is obviously ridiculous. This type of problem needs to be solved in a way which requires no changes at all from developers, or it will almost certainly go nowhere.
Also love Pg and using flavor specific features where they deliver tangible value. That said, if a team maintains multiple flavors often then an abstraction can improve quality of life.