skysight-inc/HackerNews huggingface dataset:
I disagree. Issues like this on really core language primitives usually crop up when either:

1) The language lacked hindsight in its domain because there wasn't a ton of prior art (C)

2) The language didn't have enough foresight put into it (JavaScript)

3) The language's modern usage has drifted significantly far from its original usage (Java)

Python is an example of a language people use that doesn't suffer from #1 (thanks to Perl and friends), doesn't really suffer from #2 (at least, Python 3) and doesn't (yet) suffer too badly from #3. It has plenty of flaws and limitations, but not in its foundation. The core language primitives are rock-solid.

#1 doesn't apply to Go, and it's not old enough for #3 to apply. So that seems to only leave #2.

(I should add that this doesn't make a language completely invalid or useless. I use (and even like!) JS despite its flaws; in fact I prefer it to Python overall, mostly due to the ecosystem. It's just disappointing to see issues of type #2, because they seem so avoidable.)
How so? CFN is terrible to write and maintain, cdk abstracts alot of the difficulty and makes reusable components possible. I work at Amazon...
The transaction must be denominated in dollars, but must dollars actually change hands? I don't think so. Companies buy other companies with stock issues all the time.
Depends, functions that take booleans and enumeration flags to change their behaviour come to mind.

Also modules, objects and components packing functions together as means to make sense of disjointed functions.
>>> You can’t expect the buyer of a software to assume responsibility for copyright violations

Yes you can. Certainly true in the US. Liability depends on state law and in how the contract is written. If the buyer did not specifically make that carve out, a judge may end up deciding.

If the seller specifically carved that in, the buyer can be liable too (along with the seller).

This is why most government entities are difficult to contract with. They have buyers that insist in specific contract language. Govt entities have templates preapproved by lawyers to prevent this sort of thing coming back to haunt them. So if you want to do business with the govt, that's the hoops you will need to jump over.
Most posts which are critical of China get a lot of downvotes. The reason for that is speculation as HN does not publish statistics or transparency, but the issue of lab leak versus occurring outside of the lab has become so political that it has divided rational people who might otherwise question more honestly.
Thanks! It's still a lot of hoops to jump through coming from visual studio perspective where all settings can be imported or exported to a file. But this is workable!
> Things like whether you have dogs, kids, are a smoker.

Or have a German ID card (Personalausweiß). Last time I tried to rent there (2017) I had a hard time finding a place as most landlords insisted that I'd be showing them my ID card (mine expired while living abroad). I think without it, it'll be additional hassle with the Einwohnermeldeamt for you and the landlord (not sure about that, but some landlords wont be either).
I wouldn’t assume it’s fixed yet. Even if they’ve managed to write bug free code, you’re still at the mercy of driver supplied by the chip manufacturer.
The Bitcoin network depends on a global functioning Internet. That depends on all of the defense, government cooperation, etc to stay stable.
An interesting correlation is that songwriters used to be popularly-famous. Cole Porter, George Gershwin, Irving Berlin stick out.

But I can't confidently name a single songwriter from the last 50 years, aside from the ones that were predominantly popular performers and recorded-music artists (Roger Waters, Lennon/McCartney, James Taylor).

To me, not knowing any better, this suggests that songwriters had more economic self-determination within the music industry, which translates into influence and cachet, in the 1920s than they do in the 2020s.

Today, again as an outsider, it seems like publishers and managers have an outsized influence, because they control the economics more than any other entity in the system.
An unwelcome prank: Volkswagen purposely hoodwinks reporters
Either memories are reliable or they are not. It seems they are not. You're free to deny that fact or to refute it with counter-arguments, but claiming "people like me" are discussing it because we fear "an army of lawyers" puts you a step away from tin foil hat territory.
You get whatever you and your legal team negotiate. Just like in any other business contract.
Ever Given Easter Egg
It's really rough on the hands - dries them out terribly.
I share software engineering book reviews on my website and email newsletter. Not really a side hustle, but something fun that I enjoy.
At some point you have to wonder what products these are practice for.
Out of curiosity, how many downvotes does this comment have?
The lines between a consulting company and outsourcing company don't really exist anymore. Especially at this size.
No, the downvotes are because you aren't willing to pay a very fair price for the product and have admitted you depend on it and use it without paying and will continue to do so.
That reminds me of my first N26 bank card in Germany. I got one in the mail and immediately called them: "Wtf? Why is the card transparent?". 5 seconds later: "That shows our commitment to transparency..."
Bitcoin is like a decentralized banking system with no controls at all against a systemic bank run. No FDIC or Fed.

It has been small enough that a single Billionaire could bail it out when it got into trouble.

Once you hit the point where it'd take > $10B's to bail out Bitcoin it is going to unwind eventually in a bank run/panic.

This time is not different, and those who fail to understand the past are doomed to repeat it.

And its driven at this point by greed and "number go up".

And the reason why people like it is that they put $10 USD fiat in one day and draw out $100 USD fiat some time down the road, and its that ability to extract fiat from it that it is tied to. It isn't any kind of alternative. Everyone watches how much it climbs in USD denominated terms. Nobody remembers "1 BTC = 1 BTC" even as a joke any more.

Bitcoin is also extremely easy for the vast majority of the population to quit. You don't need it to buy groceries, you don't need it to pay your mortgage or your taxes. When the supply of $USD in the system goes to zero and the price collapses from a large enough height, there will not be any floor to it.
I absolutely do think it should be an investment and I think treating housing like an investment has substantially increased the quality of housing. A great deal of advances in materials, construction, electrical work, plumbing, you name it... is because housing is treated like an investment and people are willing to spend money to keep their asset in top shape.

Furthermore I believe that investing in real estate promotes those asset owners to contribute to the neighborhoods they've invested in. When you invest in something you are participating in its growth and you're attempting to align your well being with the well being of the asset you're invested in. That's a great thing.

The downside to real estate investment is that it could prevent future people from participation. The solution to that isn't to stop treating real estate as an investment, it's to allow more opportunities for building and to incentivize people to build entirely new communities instead of pigeon holing everyone into a handful of existing mega cities.
> That is: it's proof that the work is "for" you.

I mean yeah, but it's all just semantics in the end, isn't it? The art (or whatever else) may have been made for you, but it doesn't matter- de facto, it's in the public realm. I'm over here, enjoying the thing, even if some database somewhere says you own it.

As for the license keys idea, is that such a big problem? Do people actively go around stealing license keys from other people? Willingly making copies for your friends and colleagues, sure, but that's no different to giving your friends and colleagues the private key tied to the token, which presumably would be possible if you create a new one per transaction.
I have a hard time classifying this as a "design problem" when it has zero practical implications. I've never encountered a problem that can be traced back to this, nor ever helped anyone else with a problem that can be tracked back to this. If it is a "design problem" it is of the weakest possible class. I can't imagine what would "fix" it that wouldn't be a larger design problem of its own.

The whole "confused about nil interface vs. interface containing nil pointer of some type", while I would contend has a root cause of improperly importing the idea from C++ that nil is automatically invalid when in fact it is perfectly valid in Go to call methods on nil and thus confusing "nil" with "invalid", is at least a cause of real bugs and real misunderstandings.
Sure, people are using Bitcoin as a store of value, but I think a lot of those people think it will just keep going up.

Which is not a super rational thing to believe about an asset whose value has no relation to anything in the real world, and nothing to prop it up but the people who believe the same thing.

Bitcoin is up something like 800% for the year. It might be up another 800% in six months! Or it might go down to $10000! Or $1000, $100, $10 -- any of these would make exactly as much sense as the ~$60K we see right now.

Taxes aside, that strikes me as a pretty volatile place to be storing your value. Not everybody has the option of USD or CHF but still... it sure does look like a speculative bubble. (For actual "mania" maybe see NFT's instead.)
> Country: United Kingdom

> In EU?: true

How very 2019.
Well, because I like the finished product. Big fan of the Britney songs. Great end product. I don't need John Williams to have grown the tree and cut the wood to make the guitar that he plays Asturias on.
The only problem is Cloudformation is strictly AWS resources, so unless you're absolutely 100% sure you'll never need anything outside of AWS ecosystem, I always recommend using TF.
The only thing that matters is: what is the risk of 2ppm of it in hand sanitizer? My guess is that it's very little

It is volatile. It won't spend much time in your hand. You won't breathe a significant amount of it. You aren't ingesting it.

"Oh but Benzene is carcinogenic" yes, it's also present in Whisky, in a bread slice that was left too long in the toaster, etc.

> The U.S. Occupational Safety and Health Administration (OSHA) has set a permissible exposure limit of 1 part of benzene per million parts of air (1 ppm) in the workplace during an 8-hour workday

https://en.wikipedia.org/wiki/Benzene#Exposure_to_benzene
I think it's almost worse in tech because it largely works. If the government sets a flawed metric, their real goal of pleasing their constituents has failed and theoretically they either have to fix it or lose political support.

But in tech, if your goal is just to make money, soullessly following data will often get you there, to the detriment of everyone else. Clickbait headlines will get you more views. Full-page popup ads will get you more ad clicks/newsletter subscriptions. Microtransactions will get you more sales. Gambling mechanics will get you more microtransactions.

You can say it's a flawed metric, but I think in the end, most people just actually care more about making money than they do about building a good product.
Don't hesitate if you have questions :) It was 13 days but it was INTENSE!
I realize now that calling it an edition was an error on my part, because in irl an edition is a physical copy of the work itself which can be made scarce, whereas a token is just a pointer with a url to some infinitely-duplicable bits, so the edition metaphor does not hold.
No one educated should be using NordVPN, more or less. At best it might be acceptable to throw a ton of torrents on as long as you don't use their terrible proprietary client.

Even the front page is already freely giving away tons of data to multiple analytics providers.

Basically any VPN with an affiliate scheme you should stay away from. NordVPN, Ivacy, VPN Unlimited, FastestVPN, etc explicitly, run like fuck. The more "YOU ARE UNPROTECTED REGISTER NOW!" the faster you should run.

NB: I am a power user/developer, but I do not use either company. Objectively, a basic eyeball comparison (match bullet point indexes):

Mullvad:

- Says "Not using Mullvad" / "Using Mullvad" (a neutral statement)

- Shows their company address and registered location at the bottom of every page

- No on-page analytics

- No third party includes

- One price

NordVPN:

- "Your Status: Unprotected"

- "Copyright NordVPN.com" only

- Multiple on-page analytics and third parties

- Loads google tag manager, google analytics, bing marketing, youtube, third party web surveys, zendesk, twitter ad pixel, google ads, bing, cloudflare, ada chatbot, ravenjs, processout, multiple fingerprinting and persistent device identification/tracking services (also performs webgl/font iteration/plugin iteration/canvas fingerprinting, etc)

- Repeated upsells, lying to you about price (see JS for fake "sale ends in x seconds" countdown timers that attempt to induce FOMO and more), packed with dark patterns; "9 hours left easter special TODAY ONLY" - same sale that has been running for years
Stop being dramatic.

2ppm isn't a lot, and it is a temporary measure. Benzene can be absorbed through the skin but most of it evaporates off (as hand sanitizer is intended to do) before it is absorbed.

So yeah. The FDA reasonably updating guidelines to make sure people can buy hand sanitizer during a global pandemic is probably better than the fraction of a percent increased risk of cancer.
+1, moving intentionally to avoid this is asking for a lot of trouble, especially for a bill that large. I hope he consulted his financial advisors.
Nice! I hadn't heard about Moss Landing. It's only been operating for 4 months.
Bitcoin, what took ye so long? (2011)
That's not the SEC, it's just some ambulance-chasing law firm.
Perhaps "Hello world copy and pasted from StackOverflow."
Obviously. That's not what I'm saying. What I'm saying is that someone can just as easily hack in and steal the key and forge new NFTs as if they were the artist.

Which now, as someone else mentioned, you need a database of invalid NFTs. But if the artist's key is stolen, how does one create a database of "bad" NFTs? Now you have a bigger problem. Either you create a mechanism where a 3rd party can revoke an NFT or you create a separate ledger of "bad" NFTs. But how do you verify that new Beeble is Beeble and old Beeble is not Beeble. And now what if their key for signing the "bad ledger" is stolen?

Do you see how recursive this whole tower of trust is? At least with a central database the maintainer could restore a backup and notify all parties that they were hacked. With a blockchain, you're fucked. There is no "undo".
Swift, OCaml, Haskell ('bit of a toughie that one),

Elm if you favor "absolute simplicity", it's a pure functional language which eschews all the advanced type stuff found in most functional language. And I do mean all: elm actually eschews abstract types entirely, it doesn't have traits, interfaces, … except for a limited number of built-ins (comparable, number, appendable, and that's about it, well there's also compappendable which means comparable & appendable, and some people advocate for removing even those: https://discourse.elm-lang.org/t/just-for-fun-what-if-there-...).

It used to have a concept of "extensible records" but I'm not sure even that remains.
I've seen the same pattern as well. Growing dev teams quickly without quality drops is difficult. At some point, if you're successful enough in that space, your need to bring in more bodies outpaces your ability to ensure you've got good staff and processes.
In the beginning of the pandemic, I bought 5 + 2 gallons of food-grade ethanol. I also bought Everclear at 60% knowing others could be cocktails of chemicals made somewhere abroad. Unfortunately, recently I lowered my guard and started to use more convenient stuff bought at Amazon, and I started to get some irritation with it.
Yeah, I was surprised they made that leap to the dolls carrying messages about their expected roles in society. As a little girl, my doll was more an outlet to be able to imitate my mother. She’d give me a cuddle, clothe me, put me down for a nap, and I did all that with my doll. I also had a play telephone that I’d pretend to use while watching my parents speak on the telephone. My expected role in society isn’t a telephone operator.
And also a space where nobody's going to crusade for fixing up the reverse gender pay gap.
I actually used to do this, but got so tired of it that I made a custom plugin that sends my most common commands to an open terminal window on a second monitor via a keyboard shortcut. So now I can press F5 to 1) compile arm64 target and create an APK, 2) install the APK on an Android device, 3) run the newly installed application, and 4) execute logcat to view logs

That's a hacky solution since it requires a server app running in the terminal listening for commands from ST3. There's also some logic in there to make sure nothing happens unless all files have been saved, to avoid some impossible to debug situations. As far as I know there's no better way to accomplish something like this in ST. I've seen some plugins that use a text buffer/tab as a command line output, but that's terrible.

On the bright side, this does allow me to use whichever terminal app I want instead of being forced to use whichever built-in terminal the ST devs might include.
Ask HN: Software Engineers – How to overcome being assigned tedious tasks
I'd really appreciate some advice here. I've been working for about 6 months on a project and everyone on the team has about the same tenure as myself at the company/project. Initially, I was assigned to write tests for our end-end pipeline and completed the assignment, but eventually that was the only type of work that I was given. No real coding, just testing. Maybe software engineers that haven't been performing at high levels are mostly given the job of testing code, or it's just a standard to have certain developers do all of the testing, but it's really eroded my confidence and passion for developing. I've tried to bring this up with my manager (admittedly passively) and he keeps suggesting that I will be able to work on different assignments after a couple months. In addition, the team is so large that it's often easy for him to lose track of an individual developer. Any suggestions on how I can improve myself to get out of this rut when everyone else in the group seems to be enjoying the new types of experiences they are learning from.

P.S. hope I didn't complain too much, but if I am just let me know :)
Highly likely its all media and propaganda driven. After passing $2 trillion in 'covid relief' and shooting for another $4 trillion in 'infrastructure', work will need to be done to keep consumer confidence in fiat
Smart homes?
Create a static site generator with Python and Replit
Such is the sad world of Bluetooth. The dirty secret to this industry is that this, while seeming hacky, is the bare minimum de-facto standard in most cases.
I think I was chosen by accident. I called my doctor to confirm and they said to proceed. According to online trackers, currently its the 70-year-olds turn, and there is over ten million of them in Germany.
RMS is great leader, but apparently horrible manager. Leaders must have passion, not be just mindless MBA drones.

Even though I usually disagree with his vision of how software should be made, I feel sorry for him being target of this insane witch hunt.
Right? And the message they carry is that adulthood is possible. The entire point of dolls for both boys and girls is to play at being adults, which they do spontaneously cross culturally anyway. These toys facilitate fantasies of empowerment and maturity, and as such are an important part of how we develop into adult humans. They're not top down imposed cultural conditioning.
You manage the network yourselves.

Can you manage a hardware firewall yourselves?

If not, it is a bad idea.

Good luck.
Your points are true. But I don't think we're talking about absolutes here.

This is a tradeoff. A "random user"[0] might be put off by having to type in a password every time they boot up their PC and forego disk encryption altogether. This approach is a net improvement over an unencrypted drive, even if it's not perfect.

As usual in matters of security, threat modelling is important. Who are you and who are your defending againts?

Are you some high(-enough)-profile target with potential access to interesting infrastructure or data? You may want to not rely on only this approach. As siblings have said, some kind of supplemental factor could be better. Say a challenge-response factor based on a Yubikey. Also, if the thief is determined, they may attempt to steal the laptop while it's running. You may want to look into desktops if that's the case. And not plug them into a UPS, of course.

But are you just a random Joe whose threat model is that you have some photos you wouldn't like seen, maybe some personal documents, but not much more? Then you need "just enough protection". If someone steals your PC, it's likely for the PC itself and not for the data it carries. They may want to check what's on it, see if there's anything juicy. Might even try "password" or something to unlock it. But they will probably not spend too much time trying to brute force Linux (or Windows for that matter).

> Almost every machine has some services exposed

How often is this the case on a random user's machine?

Even on my Windows machine I've only got SMB and RDP listening. Which I've manually enabled.

On my Arch Linux machine, which is my actual work machine, only SSH listens. Which I've manually installed and enabled. On an ubuntu desktop 20.10 install, there's no SSH server installed. There are no daemons listening on the external interface.

I guess you may attempt some attack against the DHCP client if you really want to get into that machine. I also suppose the pipe wrench exploit can still be tried.

> and there are also hardware-based attacks possible

Don't you think that if someone's going to invest the time and ressources to conduct such an attack against your PC you might be the kind of target who should be aware that's a possibility? Which brings us back to the point above about threat-modelling.

---

[0] I realize we're talking about LUKS and Linux, so maybe the "random user" isn't all that random. But maybe it's a "mom's computer" on which someone installed Ubuntu or something.
7-day Newsletter Challenge: How I will validate my ideas
> My guess would be that it's lower and more renewable but I could be wrong.

That'll really boil down on a discussion of power sources (there were a few threads on this last week). Basically, how much power does it use, is this power to spare, what's the percentage of renewable energy etc..
> This assumes that introduction of new renewable sources of energy is independent from bitcoin mining. As far as I know this is true.

It is not. There are marooned renewable energy sources (dams) that have had limited usage (the dams being mainly for flood control) until miners came along. Building high capacity transmission lines to them wasn’t economical.
The Mysterious Case of the Fucking Good Pizza – Travis Kalanick's New Company
Huh, so equality isn't transitive in Go. Yikes.
That's right. I use NordVPN because I got suckered into it using their terrible tactics (the whole 67% off for a limited time only offer that's been running for the past what, 3 years?), because stupidly I didn't do any research, but in general I only use NordVPN for ahem torrents. All else, I'd trust my ISP more than NordVPN.