skysight-inc/HackerNews huggingface dataset:
Well, shit happens. Imaging doctors working in organ transplants, and one of them damages trust of people by selling access to organs to rich patients. Of course that damages the field for everyone. And to deal with such issues, doctors have some ethics code, and in many countries associations which will sanction bad eggs. Perhaps scientists need something like that, too?
It’s been getting harder to find references like these online.
Stories I’ve read about can not be found anymore.

It’s like someone is messing with the search results to only give one political viewpoint.

On the plus side it’s fun learning about what your not supposed to know by seeing the fact checkers disprove a story I hadn’t yet heard about.
So convenient that the refutation ranks higher.
Disrespecting some programmers on the internet is, while not nice, also not a high crime.
Yeah I got that. But I don't think that was a driver for these clubs wanting to form the super league, as they wouldn't be worried about relegation (and its financial implications) in their domestic leagues any way.

Compare that with the English rugby premiership where they want to ring fence the league so that none of the teams can be relegated, and it very much is driven by the financial implications of being relegated. (Of course they will wait until one of the biggest clubs gets promoted again, after being relegated due to fragrantly breaching spending rules)
>It shows there is a problem with the review process if it is not catching 100% of this garbage

What review process catches 100% garbage? It's a mechanism to catch 99% of garbage -- otherwise Linux kernel would have no bugs.
We've explained this in the blog post here: https://www.prisma.io/blog/prisma-the-complete-orm-inw24qjea...

I think this quote summarizes our plans nicely: Prisma's vision is to democratize the custom data access layer used by companies like Facebook, Twitter and Airbnb and make it available to development teams and organizations of all sizes.

The open-source ORM we're launching today will of course remain open-source and we'll keep investing into it since it's be the foundation for the commercial tools that folks will be able to use on top.
Can someone compare to Hasura please? What has been your experience?
Apparently they asked Everett to teach them basic numeracy skills (counting to 10, 1+1=2, etc) and were unable to grasp it even with months of study.
To make it a fair comparison you should contrast... an inside job with an outside job?
This statement feels straight out of 2017.

Have you looked into the Ethereum ecosystem of 2021 by any chance?

Some examples:

- You can use your tokens as collateral, borrow stablecoins and pay off your mortgage while the loan pays itself off from the interest being generated by the collateral - you do not have to pay back the loan => https://alchemix.fi/

- Borrow stablecoins at 0% interest on your collateral => https://liquity.org/

- Musicians managing royalties of their work through NFTs => https://eulerbeats.com/

And there's a lot more.
What papers or statements has this professor made to support that kind of allegation? Can you provide some links or references, please?
> This took 1 min of thinking btw.

QFT.
> would you want to spend the rest of your life married to someone who considered things like your salary or your Strava data or other such superficial metrics as important markers of your value as a human being?

Obviously most relationships will have discovery of this information at some point, very early on. It is hard to hide the beer gut, or the lack of a car/job/own apartment/other status marker. So being able to filter on it saves time for everyone - and arguably benefits the women who don't fall for the guy who fakes status but who they wouldn't want to spend time with otherwise. Basically what the job of the marriage match-maker was in old times.

(And of course the alternative might be no mate, or a mate found through a hook-up app with few common interests...)
> They just proved that OSS is not military-grade...

As if there is some other software that is "military-grade" by the same measure? What definition are you using for that term, anyway?
Actually, I think participants in an A/B test should be informed of it.

I think people should be informed when market research is being done on them.

For situations where they are already invested in the situation, it should be optional.

For other situations, such as new customer acquisition, the person would have the option of simply leaving the site to avoid it.

But either way, they should be informed.
If you are thinking of digital/technology teams in consultancies the Accenture, Sapient, Deloitte etc. I have a few broad generalizations off the top of my head:

1. These organizations will focus on servicing clients with market leader technologies; Adobe, Salesforce, etc. There will be very little if any bespoke work, unless they're lucky to win some creative/communications projects. As such, they tend to attract large clients who can afford such projects — i.e. automotive, financial services and insurance, governments etc.

2. Bonuses maybe, but I've never heard of a commission model in those organizations for developers. Bonuses are usually not paid unless you are at an executive seniority with lead-generation or client-service role (in which case, very likely you are not a day-to-day developer)

3. Travel is very common, even for developers. The more senior you are in your role, the more likely you will travel for pitches and meetings. Developers can be co-located (i.e. you work client-side), and this is common when you have a few local leads and have development teams elsewhere (i.e. India, Poland, etc). You are a 'consultant' first, developer second.

4. Glassdoor/LinkedIn salaries are fairly accurate. From my experience, tech companies will pay more, have greater benefits, and bonuses. Few of these organizations are publicly traded, so there's no shares. However, if you are a specialized talent, i.e. Salesforce architect, Amazon Cloud certification etc., you can expect a significantly higher salary as those roles allow the organizations to go for accreditation and can be billed to clients at a much higher rate. Clients are happy to pay for "Salesforce experts," but will wonder why every other developer isn't 50 EUR an hour...

5. Most consultancies are very heavily invested in the technology space, and I have found that these organizations tend to have very clear performance frameworks for promotion. Largely, however, it focuses on the "client service pathways" i.e. if you want to be promoted, expect to do more and more client service work — pitches, planning, team management, etc. And less development over time.

As for contracting, IR35 has changed the UK landscape a lot. There is a lot of money for specialized talent (experts in a particular product suite), but because of IR35 I feel most organization will try and hire internally to avoid the grind of per-project contracts.
For those of you that want typed SQL queries check out pgtyped[1]. Using it in production and it is great for writing arbitrary SQL queries and getting full typescript support.

[1] https://github.com/adelsz/pgtyped
The license does not include the phrase "connect directly". It says if you modify the Program, your modified version must prominently offer all users interacting with it remotely through a computer network [..] an opportunity to receive the Corresponding Source of your version

"interacting with it remotely through a computer network" may include several hops, the text is unclear at this point. And there is precedent for this interpretation, Microsoft uses the same concept (as "multiplexing") in their SQL Server license terms: https://download.microsoft.com/download/3/D/4/3D42BDC2-6725-... (pdf, from [1], should the document link change in the future).

[1] https://www.microsoft.com/en-us/licensing/learn-more/volume-...
I have always enjoyed this light-hearted "formal" analysis of the hardest languages
https://people.cs.umass.edu/~rsnbrg/hardest.pdf
All of them, for the English clubs at least. Would assume it's similar for the other countries too
Got my 2 year in 2010 at a local CC... they taught VB.Net and DB2 SQL on mainframes. I THINK they are moving towards more JavaScripty stuff but I'd not be surprised if the CC still teaches VB and DB2 Sql because local corporations still have the need.
That's not really how it works. Nobody's out there 'approving' research (well, not seemingly small projects like this), especially at the university level. Professors (all the way down to PhD students!) are usually left to do what they like, unless there are specific ethical concerns that should be put before a review panel. I suppose you could argue that this work should have been brought before the ethics committee, but it probably wasn't, and in CS there isn't a stringent process like there is in e.g. psychology or biology.
I mean, the online dating is already Black Mirror-esque for most of men (if you read the article). Whether my solution is a genius solution or a stupid idea, time will tell and it's up for debate (which is what we are doing here).

I mean, I still have backup projects if this idea is stupid or does not take off. I can still write DeFi app. I have a part-time jobs board. I have a tool to predict the salary range of jobs. So it's not the end of the world if SwanLove is a stupid idea.
TypeORM is poorly maintained (the lead author had a breakdown and appears to be inactive, and failed to delegate ownership to others), and is riddled with bad abstractions, poor design choices and an enormous pile of game-breaking bugs that make the TypeScript types unsafe and it’s usage clunky and dangerous. I would absolutely use knex, which works, over TypeORM, which routinely doesn’t.
It approved the research, which I don't find objectionable.

The objectionable part is that the group allegedly continued after having been told to stop by the kernel developers.
Are consultancy salaries that good? If trying to optimise for compensation, my mind would jump to finance or contracting, not to working for a consultancy.
Recruiting a rogue employee is orders of magnitude harder than receiving ostensibly benign patches in emails from Internet randos.

Rogue companies/employees is really a different security problem that’s not directly comparable to drive-by patches (the closest comparison is a rogue open source maintainer).
Linux: Don't get me started on “executives”
Not nearly as long as California's list.

And, to be fair, many of those things do cause cancer.
> The prime purpose of NATO is deterrence

There is no point of deterrence when if Ukraine is gone, and you have Russian tanks in Vienna in one week, Munich the other, and the rest of Europe in a month.
Very interesting, thank you. Is there a way for me to monitor what Prisma is doing in my use case?
Integrate it with ghost. There aren’t many options for us building communities on Ghost for commenting. Cove.chat but the experience is less than premium IMO.
I'm sure it's possible to get the best of both worlds, it's just that no one have made it yet. An active GPS tracker does not have to be larger than a keyfob to your car nor does it need to be online all the time. A combination where the GPS is only activated once the tag has not seen a known device for 1 hour. That should give you a battery life measured in years with meter precision when it matters.
How I Became a Libertarian
Absolutely not. I'm not a lawyer, just a citizen of the UK who has to live in a society that the DM has poisoned over decades.

I have no sympathy whatsoever, but as for the legal case I have no idea how this plays out.
It's not complicated, but the .NET tooling on Linux did not understand it :) that's what my point is all about. For the best .NET experience, use Visual Studio on Windows. If you're not on those two, the tooling experience is not going to be particularly pleasant - nor the documentation.

My advice after having tried it seriously - .NET does work crossplatform, I've seen it, but you need to be a Windows dev to tap into that. Would not recommend a mac/linux dev who's looking to do cross-platform work to pick .NET as the foundation.
I bet one could modify this to save indexes of invalid chars and do what you say with just one additional copy
Oh also, Blitz.js is a nextjs fullstack framework that uses and autogenerates prisma code to work with.

Also FoalTS is a nice small framework for building rest endpoints with TypeScript, and recently landed @prisma support/documentation besides typeorm.

Just random fyi, hope someone finds it useful if they wan't to try prisma in a more batteries included package.
But it wouldn't let maintainers know what is happening, it only informs them that someone will be submitting some patches, some of which might not be merged. It doesn't push people into vigilance onto a specific detail of the patch and doesn't alert them that there is something specific. If you account for that in your experiment priors, that is entirely fine.
I'd argue the DM was one of the pioneers of this approach. Ad-supported and not-garbage online news sites _do_ exist, although they are a dying breed.
That is not “showing masks don’t work”. That’s just some hypothesis of an individual and he is mistaken on multiple premises.
"Mongita" is a misspelling according to the DLE; the standard spelling is "monjita". Literally, the word means "little nun", but is the common name for flycatchers of the genus Xolmis. https://dle.rae.es/?formList=form&w=monjita# https://es.wikipedia.org/wiki/Xolmis_rubetra

Unfortunately every time I see the misspelling in this thread I involuntarily cringe. I suppose "MongoDB" is named after a slur used to insult people with Down syndrome, so maybe calling this project the Spanish equivalent of "Magolia", "Mamalian", or "Meercat" is a clever reversal of the insult into a form of self-deprecation on the part of the author, who is wittily feigning illiteracy? Or perhaps it is intended to ridicule the speling of Spainards and other speekers of Spansh? Or programmers who decided to yoke their applications to fake open source?

Even if correctly spelled, perhaps the name would be more appropriate to a debugging tool than to a hash table implementation.
I am a noob in these matters which one is advised if one is to start a GraphQL API from the beginning

- use DBs that directly provide GraphQL endpoints such as Fauna, Upstash, etc.
- use an ORM with more traditional DBs.

What are the pros and cons of each?
If it was all userspace Rust, it would have been possible to choose the implementation at compile time conditional on the presence of std.
Pgtyped made sql+typescript a pleasure.
The virus may spread in whatever way it does, but what public-health measures are to be used to respond to it, have to have some kind of mandate from the population. Already in several countries the authorities have chosen not to impose tighter restrictions on gatherings because the population has shown that it would flaunt them. In that case, public-health officials have to change their messaging to e.g. encouraging those gathering to do so outdoors, where transmission is less likely.
Like what? Respect for human rights? I mean, my brother is in Vietnam and some of the stuff they do there would be unconstitutional in the US.
I respectfully ask you to cease and desist from making wild accusations that are bordering on slander.

Responding properly to that statement would require someone to step out of the HN community guidelines.
That's a false claim, though. There's evidence that at least one of the students involved did not do anything to alert kernel maintainers or prevent their code from reaching stable. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux...
I'm sure a lot of hard work went into this, so I mean no offense here when I give my honest feelings.

The big differences between v1 and v2 make me uneasy. I am reminded of the constant API churn of React-Router, or the complete change from AngularJS to Angular. This approach makes me very hesitant to learn the library, because I am afraid of having the choice of painful upgrade or a dead dependency down the road.

I am also wary of the library being VC-funded, because I am afraid of what kinds of features will be held at ransom down the line once they need to start making money.
You're right, prices are determined by supply and demand but that's exactly what this article is about.

Ethereum has always had demand (due to the growing ecosystem of DeFi, NFT, etc) but the supply was arbitrary.

What's coming with EIP-1559 fixes this by directly linking the supply (or rather burning of tokens) to the demand of the network.
If you click a tag on the result/preview page (in mobile Firefox), the result list is filtered by the tag (you get a new/shorter result list with an updated result number).

But because you are still on the preview page you don't immediately see this as it's done in the background.
But once you close the preview page (with the big arrow on the top/left of the preview page) you will see the updated result list and number.

Of course, this is a design flaw, we should automatically close the preview window once you select a tag to immediately show you the updated result list.
In the desktop version, this is no issue, as there result list and preview window are always simultaneously visible.
You would not have been approved for a passport, if deemed unworthy.

Whilst other countries do this, in the West, denial to issue a passport is typically predicated upon conviction of extremely serious crimes. Not merely because some hidden agency does not like your social standing.

Further you require a valid passport, or an 'exit permit', to exit China. You may not leave legally without one.

Not so in the West. You can not be detained from leaving the country, at all, passport or not. Other countries may refuse you entry, but this is not remotely the same thing.

For example, if I as a Canadian attempt to fly to the US, Canada grants the US CBP the right to setup pre-clearance facilities in Canadian airports. And often airlines handle this for foreign powers as well. However, that is a foreign power denying me entry, not my government denying me the right to exit.

As an example, I can just walk across the border to the US, and have broken not a single Canadian law. US law, if I do not report to CBP, yes.

Meanwhile, one would be breaking China's laws to cross the border from China without a passport, or exit VISA.
pgtyped is awesome! We mention it along with similar tools like Slonik and Zapatos in our docs here: https://www.prisma.io/docs/concepts/overview/should-you-use-...
"you wouldn't have allowed me to experiment on you if I'd asked first"

I'm shocked the researchers thought this wasn't textbook a violation of research ethics - we talk about the effects of the Tuskegee Study on the perception of the greater scientific community today.

This is a smaller transgression that hasn't resulted in deaths, but when it's not difficult to have researched ethically AND we now spend the time to educate on the importance of ethics, it's perhaps more frustrating.
You can also easily cause DOS by overwriting toString to return something unexpected like an int
It's funny. When someone like RMS or ESR or (formerly) Torvalds is "disrespectful" to open source maintainers, this is called "tough love", but when someone else does it, it's screamed about like it's some kind of high crime, with calls to permanently cancel access for all people even loosely related to the original offender.
TikTok sued over use of children's data
Haven't been able to use its graphical interface to view historical data. At least it uses fewer resources than Grafana.
Apparently it's an additional property "indices" on the returned array.

> ..We propose the adoption of an additional indices property on the array result (the substrings array) of the RegExpBuiltInExec abstract operation (and thus the result from RegExp.prototype.exec(), String.prototype.match, etc.).

> This property would itself be an indices array containing a pair of start and end indices for each captured substring. Any unmatched capture groups would be undefined, similar to their corresponding element in the substrings array. In addition, the indices array would itself have a groups property containing the start and end indices for each named capture group.

> NOTE: For performance reasons, indices will only be added to the result if the d flag is specified.

https://github.com/tc39/proposal-regexp-match-indices

From given example:

const re1 = /a+(?<Z>z)?/d;

const s1 = "xaaaz";
const m1 = re1.exec(s1);

// indices are relative to start of the input string:
m1.indices[0][0] === 1;
m1.indices[0][1] === 5;

s1.slice(...m1.indices[0]) === "aaaz";
Auditability is at the core of its advantage over closed development.

Submitting bugs is not really testing auditability, which happens over a longer timeframe and involves an order of magnitude more eyeballs.

To adress your first critic: benevolence, and assuming everyone wants the best for the project, is very important in these models, because the resources are limited and dependent on enthusiasm. Blacklisting bad actors (even if they have "good reasons" to be bad) is very well justified.
> SQL is an impressive technology and has stood the test of time! Yet, we claim that it's not the best tool for application developers who are paid to implement value-adding features for their organizations.

I'm not sure about that. We've recently switched from JavaScript based querying code to mostly raw SQL, and we've reduced our code to about 25% of what it was, and it's much simpler to understand than it was before.

> I see Prisma somewhat analogous to GraphQL on the frontend, where a similar claim could be: "Frontend developers should care about data, not REST endpoints".

I'm not sure about Prisma, but IMO that GraphQL model isn't great. Realistically (for performance, etc) it will make a difference where that data came from. Not for super simple queries, but super-simple queries are super simple to do with REST/SQL anyway. I also feel like this distinction between front-end and back-end developers isn't great.

The GraphQL approach also leads to deployment issue with non-web clients. e.g. it can take a day to get an iOS build released, and there is no way to force users of older clients to update, so this can take months. So fixing a bad query is difficult. With a proper backend you can just swap out the query.
> Bad actors could exploit this, and the researchers are showing that maintainers are not paying enough attention.

And this is anything new?

And if I blow a hammer over your head while you are not suspecting it, does this prove anything else than that I am thug? Does it help you? Honestly?
Canada is being ravaged by it right now. Some of the worst numbers since it began. We’re talking 60x the cases from October (BC). Not sure if it’s the reason why but after the 2nd wave started to burn out they opened up quite quickly. I think people got complacent.
How Can I have a Growth Hacker with minimum cost?
Ah, but youre missing the fact that discovered vulnerabilities are now trophies in the security industry. This is potentially gold in your CV.