skysight-inc/HackerNews huggingface dataset:
It's open source ... there are many eyes on the code ... somebody or the other quickly identifies / fixes the bug ... code quality of open source software is above par ... etc. etc. have become something of a trope in our industry.

I am a big supporter and advocate of opensource software. But after so many years of both using and contributing to the opensource movement, I've realised that the popularity of an opensource software isn't really a reflection of its code quality. Minix 3 and FreeBSD are better than Linux. TextPattern is / was better coded than Wordpress. OpenSSL was insecure for so many years till its fork LibreSSL.

Inexperience of the early founder(s) of the project is one factor for poor code quality (that often does improve as the founder becomes more experienced and / or other experienced devlopers contribute to the project). Documentation and testing is another.

But another factor is money which dictates the design of the open source software.

Mozilla is a good example of this - despite the millions of dollars they have received, they deliberately avoid modularising their software. Gecko, the web engine, should be available as a stand alone piece of software that anybody should be able to use to create another browser or some other application with it. But there is no easy way to do this because Gecko has been tighty coupled to the browser code. And this is very intentional - Mozilla makes it money from browsers, and hence despite working on an open source project, their code is deliberately convulated to make it harder for others to create another browser from it to compete with their product. (Yes, you can fork their existing mess, but it's a sub-par product because of the way it is coded - you would have a really tough time creating a native UI for it, for example - and so you just end up with an imitation of their browser).

(And it is not as if they can't do it - as they realised they were losing the browser wars on mobile, they've finally released the Gecko engine for Android - https://mozilla.github.io/geckoview/ - hoping others would be motivated to create Gecko mobile browsers and they continue to remain relevant on the mobile platform).

SQLite is another example where the code is opensource, with the most liberal source license, but the testing code is closed and unavailable. Again a deliberate choice made to hurt any competing product created with their code, i.e. a choice dictated by commercial interests.

Both the above examples highlight how the open source spirit is somewhat crippled and sacrificed when a lot of money comes into the picture.
Won't it still also require a credit card for YouTube to believe your age?
No, the Swiss & EU are right in this case.

Any form of retirement works the same - young people working to serve the old. How you finance it is a different question - but clearly increasing taxes & lowering pensions is just one way of the system breaking down. Another way is, everybody saving while working, not having kids, then spending when retired (results in market crashes & massive inflation).

The original problem is not having kids. The “direct transfer” system simply keeps incentives more aligned.
sidewalk device "hey amazon i want to talk to my manufacturer" amazon: "sure thing! let me pipe you through to them" manufacturer "lets connect you to whatever we want on the internet"

how is that not unfettered access to whatever the device wants via the manufacture's server?
Neural2 | Full Stack Engineer | Remote | Full-time or part-time | neural2.com

Neural Squared is a startup building machine learning based products for the luxury goods market. Our software identifies and authenticates goods by using a mixture of mobile phone camera photos and microscopic photos.

We currently have a small development team based in London, UK which works closely with the business team based in Japan.

We have our first system in production and are looking to grow our core development team.

Tech we use: Typescript, GCP, Firebase, Vue.js, Pytorch

Looking for engineers with experience in:

- Google Cloud Platform and Firebase stack.

- Typescript and Vue.js

- Building mobile apps, or porting apps over from web

- ML model deployment and integration experience would be a plus.

- Can work with our London team in GMT timezone.

We are a fully remote team, offering competitive salaries.

Email: jobs@neural2.com
How German Risk Aversion Is Killing Progress (Translated from German)
That is for USA though and not the rest of the world. Europe has quite a lot of successful political pushes from the people.
make sure you check in 6 months to re-disable it from the bi-yearly "ooops our update enabled it again"
if the exploit is in your web app, then you're already too late. Security is about layering. Which is why postgres/mysql have users and permissions. One thing I typically do is prevent DELETE statements from the web app db user. You can also prevent access to tables or even columns. Or you can go in the opposite direction and YOLO-it by putting SQLite right in your web app process, following the recent craze.

Environment variables are typically how secrets are used. Anything else is going to add further complexity and have another set of caveats. Env vars are simple and all devs (and programming languages) know how they work.
After years working as a team member I built a productivity tool specific for us
Tried it, but I don't support using it, my productivity is down.

I tried to "Submit Feedback", to urge FF to roll this back immediately. But that page also didn't let me get to the point.

So I'll give my feedback this way: I'll install another browser now. Any recommendations?
Ripping is usually more of a problem than some finger oil and gloves makes you less sensitive and more likely to rip or destroy stuff.
How did you get that from the article? The agreements in place already allow immigration from eu countries, not a lot would have changed in this regard. The main problem is the further erosion of swiss direct democratic rights and sovereignty.
> [...] apparently useless things (such as YearMonth) become so useful for even simpler cases.

That piqued my interest. In my opinion partial date components are only useful for alternative calendar systems or localizations (previously: [1]), so if your use cases are not one of them I'd like to hear more about that.

[1] https://news.ycombinator.com/item?id=26284353
The UEFI variable store is typically just a region of the flash chip that stores the firmware. It's not impossible that some systems perform some sort of integrity validation, but I haven't seen that in the wild.
SEEKING FREELANCERS | Android Developer (Kotlin, Java) | Berlin | REMOTE | Hourly (€60 - 90/h)

We are looking for an Android Developer to customise and implement an open source sticker packs application written in Java

Main objectives are

* Decouple the functionality from an open source application (github.com/WhatsApp/stickers) customise and implement it based on our user needs and revised flow

* Fetch sticker packs consisting of static and animated images (GIF / PNG) from our API endpoint

* Detect which messaging application is installed and dynamically customise feature pitch

* Let users preview and import those stickers in WhatsApp and Telegram during onboarding, and later in the Settings menu

* (Optional but highly desirable) Convert the code from Java to Kotlin.

We are looking for

* At least 3 years of Java OR Kotlin experience

* Previously worked in PMs and other engineers in Product teams, familiar with flexible agile methodologies

* Product mindset: Capable of understanding why are we building this feature, how it would interplay with other existing features to improve user value

Feature is already specced out and well defined. Please do not hesitate to contact me if you need more information.

Email: hiring@perseus.digital
Good ol’ E4X. It actually worked in Firefox, but I only ever used it in ActionScript. It was a little strange, but quite useful in some regards. There’s a bit more than just literals going on there.
Dupe of https://news.ycombinator.com/item?id=27362920
Most people are still not sold on January being an insurrection, FWIW. People thought they were going to a political rally, not to murder senators. Things just got out of hand because lunatics decided to storm the building.

Why else would they bring smartphones?
This is the crux of the issue. I have spent a lot of my adult life in places that would horrify the average westerner. The root of the problem in recognizing what could go wrong with this stuff, is never having been exposed to a jurisdiction of political power which is run by murderous psychopaths outside a rule of law that benefits anyone but the psychopaths. Of course "authorities" will always continue to push boundaries and seek to embiggen the largesse of their power, but we in the developed world are so lucky! Most of us here on HN have won some sort of cosmic lottery with odds more infinitesimal than any other lottery that could ever exist. But an unfortunate side effect of never having been exposed to the various hazards of human civilization that almost every other human before us has endured, is not having built up any "ideological antibodies" against these sorts of things.

I've seen comments on Youtube that seemed shocked that Youtube could trace comments to an IP address! We are deep in it now, approaching a point where the barrier to entry to understand how the technology functions is too much even for capable specialists to fully comprehend the rampant abuse happening at this very moment. How often do we as technical people find out about some new god damned thing some god damned tech company is doing to steal our data or otherwise exploit us as "customers"? And even people who are technically capable of grasping the depth of the power of this technology are still busy hammering away on their keyboards to make it more powerful, having never had to worry about violent psychopaths with political power. We are creating a truly terrifying nightmare of brutal suffering for our grandchildren or their children.
Design tools are also severely lacking here. Even modern tools like Figma have no way to manage copy well (e.g. swap out copy for different "sets" of strings to test the design with variable-length translations). Heck, you can't even use the spell checker or Grammarly on text boxes or comments despite it being a browser-based app.
I demo'd the 800 D3 at a hifi shop and was very impressed. What impressed me most was that it sounded utterly effortless like they were utterly effortless. They were powered by a pair of 1KW monoblocks and every peak in the music was reproduced without a hint of strain even at concert levels.

I will say that there was a lot of treble. Stereophile's measurements (which I did not see until after the demo, so please don't think they colored my impressions!) show some big 5dB humps in the upper treble which I would say correlates to what I was hearing. https://www.stereophile.com/content/bampw-800-diamond-loudsp...

I think this boosted treble is generally a part of B&W's secret sauce across their product range. I really believe their speakers are tailored for middle-aged and elderly guys with some degree of high frequency hearing loss. Makes sense; those are the guys with enough cash to blow on speakers like these.

I am one of those guys (well, the hearing part... not the cash part) but I prefer maybe 2-3dB of boosted treble and not a full-on tweeter assault. =)
No, Brexit isn’t possible in Switzerland.

People voted for what is essentially Brexit, but the politicians refused to implement it.

https://en.m.wikipedia.org/wiki/2014_Swiss_immigration_initi...
As a counterpoint, psilocybin forced me to make uncomfortable changes in my life in just two sessions and absolutely zero effects, also very cheap. But then it took a couple months preparing myself to do it properly and with someone. It saved my life.

I’m sorry about your friend. I don’t know anything about her so what I’ll say is in no way related to her (also ayahuasca is a different beast). One of the big warnings is that you should never take them if you took psychiatric medication last year or your family has a history of serious psychiatric problems. Another one is that you definitely have to have a proper set and setting so you have someone who supports you in case you see something that’s way too scary so you can rationalize it.

I highly recommend “How to change your mind” from Michael Pollan to understand how these things are helping a lot of people but also to understand the inherent risks. For many people it was the only thing that saved them from suicide.
PureScript's build system is very good (Spago), and the language is too, but it is tougher to learn than Elm veering much nearer Haskell.
The predictions actually won't change at all!

None of the predictions in the article actually use # of humans as a data point.

You aren't gonna input 800m to a calculation and get any different result - no calculation uses that number.

The author uses all species of earth to estimate a species size - population density ratio. This works if you remove humans from the equation.

The only other data point specific to humans is our weight.
Apify | Full-time | On-site | Prague, Czech republic

Apify runs on a highly scalable infrastructure that runs millions of jobs weekly to process way over a billion web pages every month. We run on a cluster of Linux servers on Amazon EC2 to process our workloads, multiple Kubernetes clusters to host our applications and services, and store data in MongoDB, DynamoDB, S3, Redis, and SQS.

Our system is built with Node.js and many other technologies. We use Kubernetes, Helm, Github Actions, and CloudFormation to make our deployments smooth, and ship to production multiple times per day. We monitor using New Relic One, Sentry, LogDNA, and other services.

We're passionate about delivering the best service to our customers using the best technology possible. Apify is made by developers for developers. We're building a product that we use ourselves every day and we are proud of. We love open-source and contribute to it–check out our Github https://github.com/apify. Help us make the Web more open and programmable!

DevOps/SRE (Site reliability engineer) https://apify.com/jobs#devops/sre-(site-reliability-engineer...

NodeJS Backend engineer https://apify.com/jobs#backend-engineer

More positions here: https://apify.com/jobs
There are a lot on reddit.com/r/ThingsCutInHalfPorn
To this day, every CSS I write for a website starts with a copy of the Meyerweb CSS Reset. I've been doing it for so many years yet never thought twice about it.

Only a couple months ago I decided to check what Mr Meyer was up to. I bought his book Design for Real life thinking it was about CSS. I was delightedly surprised by the breadth of new things I learned about design that I had never considered before.
Chinese AI lab challenges Google, OpenAI with a model of 1.75e12 parameters
Policymakers don't really have to deal with the realities of what you mention. Like the bad education, for instance. That isn't really "your problem". The externalities of an awful public education system are borne by the unfortunates. Not you, who did things right, and not the people like you, who it is important you identify with. And so you're not going to give that issue anything more than lip service.

^ also written somewhat tongue in cheek
Or you make Y illegal as well. Smoking is all but illegal today in Sweden, they banned smoking in restaurants 16 years ago and has since extended that ban to most public places.
Yes a comment about the USA citing a source about a study of the USA in a thread about a US federal law
The United States' failing infrastructure, both physical and digital, will be its downfall.

How fragile are we as a nation if a group of profit motivated hackers can shut down oil pipelines and food production?

What happens when a hostile nation state or terror organization actually wants to do some damage and isn't interested in negotiating with insurance companies for a few BTC.

Maybe if the DHS was focused on actual threats instead of cosplaying as SS we would be prepared for what everyone knew was coming.
High end stuff has no limits, there's always a better system in some feature/property. Also, when you start to upgrade something, there's chance of endless loops (these speakers needs better amps, which shows some defects of my DAC, etc.)

So setting a limit, reaching it and leaving it there is good IMHO.

I run an entry level HiFi CD player with iPod interface through a vintage amplifier to a pair of bookshelf style speakers (which are pretty big for their class though).

If my friend is confusing whether his phone is ringing because a similar sound is present in the playing track, then it's good enough. Similarly, if you're enjoying the sound you're getting from your system, you've accomplished your goal IMHO.

I'm neither looking for loudness, nor for that ethereal sound. If I can hear everything in relatively clear manner, and I'm enjoying it, that's it. I'd rather enjoy it instead of sweating over smallest details.

For context: I used to play in orchestras.
I loved E4X in Actionscript.
That corollary is known as the Doomsday Argument: https://en.wikipedia.org/wiki/Doomsday_argument
The sensationalist headlines do phrase it that way.
Ask HN: Anyone use the Zettelkasten method and what are its benefits for you?
The topic sums it up.

For the uninitiated, here is a description of what it is: https://www.shuomi.me/blog/what-is-the-zettelkasten-research-method
PS5 Soft Bricks with Wii Backup Filesystem USB Inserted
Even if you find the place in the `elmc` code base, fix it and make a PR: it will not be accepted. This is the walled garden aspect of Elm.

Either you accept the walls or you go with PureScript (which could be described as "Elm without the walls"; but then there is a lot more to learn and a whole plethora of frameworks where Elm has the one-to-rule-m-all-FW baked in).
On the Feasibility of Secure Traceability in End-to-End Encrypted Messaging
Wasm started in the web, but has since been ported even to the Linux kernel [0]. It seems perfect for situation where you near machine code levels of performance, but don't want to carry different binaries for different CPU architectures - exactly what you want from a plugin system. It also allows far greater isolation than "real" compiled code.

[0] https://github.com/wasmerio/kernel-wasm
You can even do an “oil change”

https://youtu.be/JMpgeMoQS7o
For me the fore-bearer of JSX is Flex's MXML.
You surely can, it depends on the domain.

"Lockheed Martin reviewed various options for the Aegis Open Architecture including the programming language and execution environment for the system. In their experiments, they found that HotSpot Java code ran comparable to C++ on an experimental 250 millisecond periodic workload. At the same time, they found that the Java language provided superior abstraction and encapsulation than C++, and they judged that retraining their existing staff of CMS-2 programmers to become effective in Java would have lower risks than attempting to train them in C++."

https://www.ptc.com/en/blogs/plm/ptc-perc-virtual-machine-te...

So there you have it, Java powering battleship weapons targeting systems, after replacing C++.
Check | DevOps Engineer / Data Engineer | Amsterdam, Netherlands | Full-time | Onsite | https://ridecheck.app/

--

Check is the easiest way through the city

We want everyone to reach their destination within 15 minutes. Therefor we introduce a lightweight, electric scooter (moped), specially designed for sharing. There is alway a scooter nearby. Within 30 seconds you are on your way.

--

We're looking for:

- DevOps Engineers, to help further develop, run and optimise our sharing platform. (Docker/AWS/ECS)

- Data Engineers, to help optimise and restructure our data warehouse for data analysis. (PSQL/Tableau/ETL)

--

Our stack is mostly in Python & TypeScript, our platform is hosted on AWS.

We're growing rapidly and are well funded, You'll be one of the first 20 hires so you will help shape the company. To know more about us : https://ridecheck.app/

Need to be able to work from Amsterdam, The Netherlands.

If you're interested, send an email to robin@ridecheck.app
Grandparent post was reminiscing, ostensibly to a time about... er, 20 years ago.
Or perhaps people who aren’t on the spectrum who don’t like the taste just keep it hidden and phrase it in some socially acceptable manner as to not offend the drunks.
Quite a combo. Why Haskell and what have you done with it graphics-y by chance?
This is true.

I'm going to make a vast oversimplification here, but a rule of thumb is that a lot of the well-regarded DIY kits on the market compare well with retail speakers that cost 2-3X as much. Some examples:

https://www.parts-express.com/speaker-components/speaker-sub...

https://www.diysoundgroup.com/home-audio-speaker-kits/home-a...

https://meniscusaudio.com/product-category/speaker-kits/

etc.
Yes, my statement might have been slightly too euphoric, however, let me provide some counter examples.

> Users generally don't care and neither do they understand what privacy means.

I agree with you that there is still a lot of ground to gain, however there are also signs of change, one of which Signal's strong growth in the past months (1). There were weeks where I would get a message that someone from my contacts installed the app every day. This was, of course, triggered by WhatsApp's change of TOS.

[1] https://www.reuters.com/article/us-signal-users-idUSKBN29I27...

I believe that IF there is a privacy-enhancing alternative that is comparably comfortable to use, people do migrate. This would also agree with your claim that users take whatever's default.

Your remarks about trust and interoperability are very valid in my view also. To solve both of this, it would, I believe, need a system that is government backed, open standard and free of charge. The latter might of course be a little optimistic, however not impossible; especially European countries provide/host many administrative services for free, why not subsidize such a system as well.

I am thinking of a coin-based system where coins are created/distributed by each bank separately and can be either transferred seemlessly to another owner or exchanged at that bank for a regular currency. In terms of convenience, this could be as easy as scanning a QR code or a similar mobile implementation and should be no obstacle.

> Look at some societies like Germany where about half of all transactions still takes place in cash.

This is true, however especially due to the pandemic, there was a considerable shift towards cashless (2). In Munich area, for example, most of time I see people pay, they use debit or credit cards, especially young people.

[2] https://www.inquirer.com/business/retail/coronavirus-surge-c...

And lastly, the connection to the amount of the expense is not clear to me, how does the amount have anything to do with the means in this particular case?

I agree with you, that we might not be there yet, also because viable protocols are missing, but I still stand by my belief that the shift is possible and by magnitudes more likely than back in 1999.
> By "the entire thing", do you mean an entire file, without knowing if all functions in it will be used?

Yes. Afaik full-codegen had no way to discover that.

> and the "X" is never "FullCodeGen was not a JIT". Which suggests to me that the people closest to development of these things don't think of them in the same terms as you do, which is why I'm trying to understand your terms.

If you look at the langage they used, they’d always call full-codegen a compiler or baseline compiler. Not a jit. Because there was nothing to gather time-of-use information from. And full-codegen didn’t keep parse information around which is why crankshaft had to separately re-parse everything, full-codegen could not hand it the source or bytecode of functions to optimise.