skysight-inc/HackerNews huggingface dataset:
With forks (in the article DAGs vs trees), pure pulling means you pull the same thing twice.

With joins, pushing only works if both sides push at the same time.

In general, joins work by a push on one side triggering a pull on the other side, and then both are combined.

For forks there should be some subscribe mechanism to turn pulls into pushes that can cheaply fan out to all subscribers.

(Side note, the mitigations ought to be completely symmetric. This is a sign there is more to the problem that I am missing.)
Humble Bundle sues Steam over alleged monopoly practices
Thanks, glad to share it!
Or your program's DLL can get replaced with some crappy malware, and now you can't figure out why Super Editor 2013 is mining cryptocurrency.
Thank you for your kind reply. I'm actually doing pretty good. I'm not currently in pain and plan to die before I am.

I figured out a good way to end my life myself should my euthanasia request be denied.

I've always been a proponent of the right to die when you wish and my current situation has given me more time to think about this and made me empathize even more with people who want to die for whatever reason. I too try to spend a portion of my time to fight for this important freedom.
Google's distroless containers attempt to fix this issue: https://github.com/GoogleContainerTools/distroless
Shared libraries aren't the same thing as dynamic linking. They're a specific subset of dynamically linked libraries. You can have a single-use .so, and just not install it in the system libs directory.

Windows eventually got this right. There are a set of OS-provided DLLs, that are true shared libraries. Then applications wanting to use other libraries bundle their own DLLs. Applications don't generally need to screw with the system libraries, and shouldn't be allowed to (exceptions for some drivers and similar).
Citation needed on “wanted to make the world population less”. Much of the work his foundation does is vaccination and other health initiatives in developing countries in order to extend lives.
Thank you. I'm aware of that. It's more work to delegate to one tool I know will often fail me and fall back on a second tool than to use the second tool in the first place.
Higher education won't help preserve the aging brain, study says
the automation world uses lots of electrical schematics for all of the sensor and actuator wiring in control panels and out in the field. this looks like a decent tool for CAD of electrical schematics. everyone seems to either use eplan or autocad, maybe autocad electrical but the 'electrical' features are mostly ignored.
Could someone explain what is meant by “vendoring”?
You seem to be implying that there's some sort of concerted effort to do this.

Is this an actual thing that you've noticed?

As in do you have any sort of data or proof to back up this assertion that there's some sort of conspiracy to discuss the Sabbath when Jews can't discuss it?
I did keto for 5 months or so back in 2014. I found the brain fog description very apt. I couldn't think beyond a couple of moves ahead, which began affecting my work. Going back to a normal diet I was fine again.
Obligatory bridge collapse fact: there have been a few historical bridge collapses resulting from walking/stepping/marching which causes vibrations in the bridge that create a feed back loop further syncing the stepping intensifying the vibrations ultimately leading to the failure. Soldiers are supposed to break stride when crossing bridges to prevent collapse.

Some people have a fear of the heights of these bridges, I have an irrational fear of vibrational collapse.
Preview ended. Now fully released. https://www.parallels.com/pd/general/?gclid=EAIaIQobChMI6_2k...
BTW, with F-Droid does is basically the same what major Linux distros do - build everything from source on trusted infrastructure.
That's part of it, which I agree falls under the excluded category. I was thinking more about code generation and program modification.

Curious what the better way to swap implementations would be?
This is so true. One of the startups I was involved in had the best team imaginable, and their product was vastly superior to the existing alternatives, but the market was already saturated so they had to grind out their sales for over a decade.

The next startup had a few really horrible people on the team, and they succeeded in spite of that fact. Eventually though larger macroeconomic conditions soured for them (ie the market evaporated) and the company failed.
Recent related threads:

Thoughts on a “HDD shortage” from an industry insider - https://news.ycombinator.com/item?id=27008295 - May 2021 (106 comments)

SSD makers start warning that mining products like ChiaCoin will void warranty - https://news.ycombinator.com/item?id=27001848 - May 2021 (381 comments)

Chia surpasses 1 exabyte of hard drive space - https://news.ycombinator.com/item?id=26975734 - April 2021 (151 comments)

New Chia coin crypto with Proof of Space may create shortage of storage device - https://news.ycombinator.com/item?id=26879278 - April 2021 (19 comments)

Chia Blockchain mainnet successfully launched today at 14:00 UTC - https://news.ycombinator.com/item?id=26515025 - March 2021 (14 comments)
The plan for Artemis is to get Humans into space using SLS so I think we may be a long way before Starship needs to be human rated for launch. That being said I think we really need to be planning big and if there isn't a future where Humans are regularly going to space cheaply then there isn't much of a future in space at all and right now Starship is the only thing close to that capability.

The requirements for anything beyond a simple Moon base really are quite daunting but we will never get close without taking a much riskier approach to space than we are seeing now.
Not sure about the exact rule, but I believe Jewish astronauts use the time zone of the place they launched from.
https://archive.is/bEiqn
It's not the program that is broken, it is the environment that is broken.
Discord will eventually be horrible (or moreso than it is, depending on your viewpoint). It's a company. They will always sacrafice user experience for profits.

Matrix is a better solution, although it has some minor issues, it has the benefit of not being profit driven
What about macports?
There is also licensing. Some licenses won't allow static linking on proprietary software.
Show HN: Decentralized Waitlist Referral Program
Hello HN,

Waitabit is a decentralized wait list and referral program. The Waitabit API enables developers to integrate with the service, add users to a waitlist, and retrieve waitlist user data. The Waitlist referral program features ranking and social sharing. All data is stored securely using blockchain technology.
> Creating a system where critical content creators are rewarded by an algorithm that requires burnout behavior continually does not seem like a long term stable business design.

Sadly, history has shown that this is completely sustainable. Content creators that burn out will be replaced from among the legion of up-and-comers who are eager for their own shot at the spotlight, and are happy to sacrifice their well-being to do so. If ruthlessly exploiting youthful naivete weren't sustainable, then the games industry would have folded decades ago.
Presumably much of that meat is eaten by humans. Any that is not should not be wasted (it should used to feed pets and other animals).

Every part of a pig is useful (skin, bristles, intestines, etc.). No part of the animal should be wasted.
This is illusory safety. The exact same risks are present in PyPI. There've been plenty of notorious malicious PyPI package incidents and there will be plenty more.

If there are dependencies, there could be security risks.

JavaScript and NPM just have higher market share, so that's where attackers are more likely to focus their efforts. This is akin to all the people who used to say Macs aren't or can't be infected with malware.

What you could do is just audit the package list and try to make a reasonable decision. 35 different packages for a small script, some with almost no GitHub stars or downloads? Maybe cause for concern. A few well-known libraries? Probably less concerning. You'd need to audit the entire lock file to really be sure, but this gives you some idea, at least.

It's true that JS developers generally seem to tend towards using a larger number of smaller libraries on average, so it's possible the risk is a bit higher both due to that and the market share, and maybe a few other reasons, but it's not like there are any fundamental differences here.

Each project will have their own way of handling dependencies, regardless of the language. You have to evaluate individual projects in any language on a case-by-case basis, and not just stereotype based on the language used. If your comment instead was ripping on the actual contents of package.json (or requirements.txt etc.), then you'd quite possibly have a valid point, but balking at the mere existence of the file is pretty ridiculous.
Until the day comes when an application isn't updated with a patched library and people get hacked. This is the reason why I'm not so keen on statically linked applications. I'd rather my applications focus on their concerns and link to shared libraries for stuff like SSL and so on. This means the SSL people can focus on shipping secure SSL libraries and application people can focus on shipping applications built on secure shared libraries.
It's a double-edged sword, though. I find that with Debian I often can't have up-to-date versions of programs I care about, because some program that nobody cares about won't build against an upgraded library version that they mutually depend on.

The requirement that every binary on the system depend on the same shared library basically led to things like app stores and Snap, which I think we can all agree that nobody wants.
Cause either you blindly sign it blindly or ??
If you're allowed to verify outside of Android, the author could simply post hashes.
Wonder if this would be useful for foundation, then build remaining using a kit/prefab.

Also, in NZ where we kinda got housing crisis, major cost (aside from 30% gov ripoff in terms of fees and inspections and consents) is earthworks. Can’t see this being solution for it, unless it’s much lighter than timber frame, which I doubt. On flip side you could probably print your rain water tanks using this.
Please don't go straight into religious flamewar. We're trying to avoid that here, and jumping immediately into it doesn't really sit with that.

An article being somehow provocative isn't license to flame. If you can't respond in a spirit of curious conversation, there are other threads where that may be easier.

https://news.ycombinator.com/newsguidelines.html
One suggestion I heard recently is giving police Brazilian Jiu-jitsu training. You can hear it discussed in detail in a podcast here.

https://samharris.org/podcasts/246-police-training-police-mi...
This seems very cool & deserving of more attention on HN!
They are very different. Google provides open source alternatives. On Linux I can use Chromium. On my Android I can install F-Droid, or just install APKs manually.
When it comes to stomping out working robotics on Mars, the 1-2 punch of cold and dust always gets the job done. With a tiny battery and 2400RPM blades, its just a toss up on which one will be the crippling punch for Ingenuity.
Vendoring is when you just copy the dependencies into your own source tree, like in a third_party directory.

Personally, I'm a big fan of just taking what you need. A little copying is better than a little dependency[1].

[1] https://www.youtube.com/watch?v=PAAkCSZUG1c&t=9m28s
It is one of those situations where the excuse is really out there and much more complicated than the simple, "we 'need' the ability to modify your app before it ships." Since the article gives a plausible scenario where that would occur (could be totalitarian regime, could be an NSL letter from the FBI[1])

Here is a time where having a history of doing the "good and correct" thing would help reassure people that you aren't being nefarious, sadly with the lack of such a history, I don't very many believe anything Google says any more.

It is sad really but there isn't anything App developers can do except leave their platform.

[1] I know, some consider them equivalent.
> Seems like hollywood has for ages turned a blind eye to a lot of these issues.

I think the people recruiting Hollywood figures into these tr
things are probably just better at identifying people that don’t really care if its the thing that it says on the tin as long as they get a paycheck; which is why they tend to target past-their-prime figures with money (at least relative to lifestyle) issues.
Won't buy em.
Surface luminescence studies have been conducted on remarkably few samples. A test on a facing block of Menkaure's pyramid indicated the block was last exposed 5000 +/- 500 years ago, just barely edging into the conventional age of 4500 years.

Given the technique's obvious utility, the lack of interest seen in applying it can reasonably be interpreted as unwillingness to have conventional interpretations tested.

"Crank" is a prejudicial term when applied to topics with only conventional consensus, without evidentiary backing.
I tried this on macOS a few months ago and it was pretty rocky just getting the thing compiled. I tried again last night and it pretty much Just Worked(tm) thanks to this[1] project.

Note: this was on an Intel mac; anyone with an M1 tried this yet?

I did run into some problems with some newer packages on the GNU ELPA. (Specifically consult, marginalia, and vertico by github.com/minad) Straight.el complained about not being able to find the packages. Any suggestions on what I might try to fix this?

[1]: https://github.com/jimeh/build-emacs-for-macos
Please don't take HN threads further into religious flamewar. I realize other commenters are doing it too but this was a noticeable plummet in discussion quality.

https://news.ycombinator.com/newsguidelines.html
One tradeoff is security. If you're patching vulnerabilities, then just a single .so needs to be patched. With static linking every binary needs to be investigated and patched.
Python vs Common Lisp, workflow and ecosystem (2019)
I’ve abandoned many apps because of subscription push. Subscriptions are somewhat like credit cards. I wonder if people realize the monthly increase in prices to their bills is like signing up for cable back in the day.

Sometimes the simplest app having a subscription seems like pure greed from the developer. The excuses are generally that of increase in development costs. But maybe that is equivalent to increasing the cost of development like increasing the cost of living when there is extra money coming in.
Ah, got it. Sorry, I misinterpreted "update everything regularly" to imply developers forcing automatic updates on every user.

I'm in the same boat, as somebody who isn't in the security field. I try to keep up with it, but will occasionally comment on things that I don't understand.
It's not really right for Hacker News to debate Jewish Law during the shabbos in the U.S. when Jews aren't around.

Why not? It's true that religious topics have the potential for flame wars, and often don't match the goals of HN. Outside of HN, it's important for religion and culture not to be exempt from rational inquiry, both by insiders and outsiders. If religious or deep cultural discussion were only permissible when a devotee is present, then demonstrably problematic religions or cultures would have an unfair and biased insulating shield to maintain their problems under the guise of false decency.

But specifically in this case where a very prominent culture intersects with technology in a very unique way, why can't it be discussed from a technological and anthropological perspective, regardless of who is around, and whether they are either not a member of this culture, or they are violating their local time's sabbath by doing so?
Please don't post flamewar comments to Hacker News. We're trying for something (hopefully quite a bit, but we'll take any) better than this here.

https://news.ycombinator.com/newsguidelines.html
This is a great question, not just in space but also very far up north where it doesn't always have a sunrise and sunset. I don't remember exactly what the answer was, but I do remember reading something good about it. Maybe I'll go look for it.
Yes, we changed it in a feeble attempt not to have a tedious religious flamewar.

(From the site guidelines: "Please use the original title, unless it is misleading or linkbait; don't editorialize." https://news.ycombinator.com/newsguidelines.html Btw, when we do these edits we nearly always use some representative phrase from the article itself. I'm pretty sure that was the case here.)
There was a good comment about it recently which moves the blame to automotive and their inventory management. Not sure if it's true, but it's a good different take to read. https://news.ycombinator.com/item?id=26931498
I’m not doing json net, but I am generating them effectively from a pre-commit hook. One of the jobs that I generate validates that the actions that were committed are up-to-date. This works well because I don’t have too many dependencies, but if you have deep dependency trees then the builds will end up taking a long time and you end up reinventing Nix or Bazel poorly.
Is Chia's real play investing in HD companies?
It's a familiar story.

Companies think they can save money by outsourcing engineering expertise. They think they can save cost by outsourcing everything to suppliers. So their financials look great, but that's absolutely misleading.

Then you have companies like SpaceX eating everybody's lunches, and to my surprise, still eating everybody's lunches.
I discovered that quite quickly after they switched.

More importantly (for any haskell developers using Arch), there are also static builds for stack, cabal and ghcup too although you then need to maintain your own set of GHC and libraries.

I can't imagine what it must be like to use the official packages since the haskell library ecosystem is quite fast moving.
Given that Google has a history of accidentally breaking things in YouTube that only impacts Firefox, I'm 100% certain they can be trusted to muck around in apps written by others.

Think of the opportunities. Next time Google releases a new social media system they can automatically add it into every existing Android app as a login option!

Google dropping their payment system again? Not a problem, they can just change everyone's billing code.

Or when they do the monthly random feature deprecation on Google cloud they can just modify any code that accessed it, across all apps!

Why bother testing when your app code could be changed at any time by Google. The time and cost savings will be massive.
If there's a prop strike with the props going hundreds of miles per hour, probably not?
perhaps, people read a link aggregator such HN/reddit.
This is where China achieves victory. All the PRC has to do is give priority to domestic manufacturers for small parts. Exports of finished items are preferred over exporting raw materials and parts. That was part of the Made In China 2025 plan.

If some other country starts to develop an in-house supply chain for some specific item, exports for that specific item are turned back on and possibly sold at a loss until the threat ceases. That's what happened with rare earths. Remember rare earth shortages. China cranked up the price, Molycorp got the Mountain Pass CA mine going again, China dropped the price, Molycorp went bankrupt. Same strategy Amazon uses with Amazon Basics.[1]

This is an explicit national strategy of the PRC. There's no secret about it.

[1] https://www.mining.com/caught-between-rare-earths-and-chines...
Good point (and shows that I am not a video game developer). I had tried to pick DirectX as something that would follow fao_'s example of game developers. The point still holds in the general case, though as you pointed out, not in the case of DirectX in particular.
The fact that price expectations are different for mobile apps and desktop apps doesn't reflect on the appstore model at all.

You can charge hundreds in the MacOS appstore and no one blinks.

People expect mobile apps to cost a few dollars. This might not be fair but isn't really due to the appstore in any way I can see.
Yes, I think this will be the way that Google satisfy e.g. the Australian government's mandate to aid intelligence and law enforcement agencies to surveil in a targeted way. Not "everyone gets a subverted copy of Signal", but "these three people get a subverted copy of Signal."
I read to the end of the article. They even developed a better (though still not perfect) PCR test that excluded most of the initial false positives!

> Its scientists also did additional P.C.R. tests on samples from 116 of the 134 people who were thought to have whooping cough. Only one P.C.R. was positive, but other tests did not show that that person was infected with pertussis bacteria.

It's absolutely possible to develop bad PCR tests, and that's why it's necessary to characterize them on large populations to determine their specificity and sensitivity. It seems the Dartmouth team didn't do that before using the test clinically, and that was their problem; but the SARS-CoV-2 tests are the most intensively-studied PCR tests in human history, and the evidence I've seen looks quite good.

So again, did you read my detailed explanation? Do you understand it? If you're just looking to knowingly spread baseless doubt, there's far more effective places to do it. So why not engage with the actual science?
You can just use icdiff to get handsome-looking split diffs in terminal. https://github.com/jeffkaufman/icdiff

in your .gitconfig

[diff]
tool = icdiff

[difftool]
prompt = false

[difftool "icdiff"]
cmd = /usr/bin/icdiff --line-numbers $LOCAL $REMOTE | less -eFXR

then git difftool
It's one a package contains it's dependencies, and often their dependencies too (transitive deps).'

packages are supposed to be nodes in a dependency graph (or better, partial order), and there are nice composition rules. But one the nodes themselves represent graph/order closures (or almost-closure) we use that nice property.

People that are very application oriented tend to like vendoring --- "my application is its own island, who gives a shit". But the distro's point isn't just gather the software --- that's an anachronism --- but plan a coherent whole. And applications who only care about themselves are terrible for that.

The larger point is free and open source software really should be library-first. Siloed Applicationns are a terrible UI and holdover from the economics of proprietary shrink-wrapped software which itself is a skeuomorphism from the physical world of nonreplicable goods.
I have been moving between MacPorts and Homebrew on my new M1 MacBook, getting back into compiling things and updating packages.

So I am taking at look at MacPorts version; someone else might get it done before I do...
If it's worth planning your business around, it's worth paying $5 for.
This is my favorite thing I've read today.
There's strong implications that we as humans have dedicated wetware hardware for streaming out speech from the data structures in our mind. That hardware seems to be bandwidth constrained to about 39 bits per second.

https://www.sciencemag.org/news/2019/09/human-speech-may-hav...

It makes sense that other animals may be able to cargo cult some of the underlying mechanical representations of speech, but would lack the neural hardware that propelled us to dominance on the incredible short time spans of human history and prehistory.
Anything that keeps replicating exponentially will eventually have its growth limited by the speed of light, because the amount of space you can reach while traveling at a bounded speed only grows polynomially fast. Because the formula for the volume of a sphere is cubic. You’ll run out of space and the things in the inside of the ball won’t have room to replicate.