skysight-inc/HackerNews huggingface dataset:
> Just because you're experience this effect (which blows), doesn't mean the tool and related tooling are somehow broken.

I've been in the node scene since 0.10. That's around 10 years. My packages have billions of downloads annually. My viewpoint here carries the weight of hours of debug time and frustration and confused users of my code, as well as meeting and knowing the npm staff at the time quite personally, and knowing under which circumstances package lock files were implemented.

They are broken.

> These Regex issues should be fixed

They do, pretty much immediately after they're reported.

> libraries should update to safe versions

I check all the version ranges of dependent libraries when I push a patch with vuln fixes. They get pulled just fine without needing to update every single package. This is what version ranges are for.

> things should advance

Yes but this is nebulous and vague and aside from the point.

> and any incentive we have we should use to make this happen.

I don't see where the disagreement is. This is exactly what happens all the time, nothing is the problem here. I don't get your point.

---

Package lock files were designed in a few short days and pushed out prematurely without much review by a single Npm employee (at the time) since they promised it for the v5 release. They were on a time crunch because they were trying to keep with Node.js's next major release timeline, which operates independently of npm's (at least, that's how it was conveyed to me).

So this change got pushed out, had an absolute mountain of bugs that took ages to fix (e.g. at one point adding a new dependency would delete your entire node_modules folder), and promised added security when in reality they do nothing of the sort.

Instead, they cause subtle caching-related bugs, they add an artifact to source control (which is always code smell in my book), crap up diffs/PRs, cause headaches across platforms, and do very little to help... anything, really.

They're super, super broken by design. Yet npm tells you you need them ("please commit this to your repository") and refuses to do basic security things without them (npm audit).

So why were they added? IIRC it was because the version resolution was a massive strain on npm's servers, so lockfiles removed the need to fetch tons of version information each time you added another dependency.

Oh, and don't even begin to whine about them on Twitter (at the time), lest you be yelled at by the implementor for being ignorant or something.

It was a shit show. They add absolutely nothing to the industry.
Very often it is actually not the transmitter, but cheap, poorly designed equipment at the receiving site.

If you are a ham, the ARRL and other hams will help you work out a problem with a neighbor.
Interesting idea. I had a similar idea for HN comments. (@dang: take note.) Impose a delay from the point when a person first makes an HTTP request for a thread, i.e., first reads a thread, before they are allowed to comment in it. This would prevent "real-time" back and forth but it would also prevent knee-jerk comments. Before commenting, a reader would have time to digest the OP and the comments and think about them. A cool-off period. This might produce better comments. It would also prevent people from just jumping into threads that have activity to post mindless commments. It would provide an incentive to dig deeper into HN than only the first page. Digging depper into HN past the front page would give the reader more potential threads she could comment in, should they become active discussions. HN already has a limit on how fast people can comment, i.e., number of comments in a given period.
How we made Befriendus accessible
Language, Statistics, & Category Theory, Part 2
The one that advocates barring elected representatives from congress based on their religion?
If we want to reach AGI within the lifetime of the universe, and quantum effects are required for consciousness [within the lifetime etc...], it stands to reason we'd need quantum computers.
Note that in Julia, ∈ is a synonym of `in`, so a minor improvement towards your preferred notation can be:

[ x for xs ∈ xss for x ∈ xs ]
While I don't disagree with you, I think we can have better conversations on HN. Honestly I would love to hear from someone with a different opinion than me. I really do want to hear the counter argument. But this is also the technology that made Joseph Redmon[0] (creator of YOLO) leave vision research. We can have ethical discussions. We should have ethical discussions. And different opinions are how we learn. And I do think HN is one of those places to have these ethical conversations.

[0] https://pjreddie.com/
In the US, monthly furnished apartments come in two flavors:

SRO (single room occupancy) -- typically very shitty and dangerous. Full of people priced out of society, junkies, people transitioning out of prison, etc.

Executive housing -- typically very expensive, used by traveling execs or temporarily by employees a company relocated

and as @pomian said, the vast vast majority of apartments in the US come with no furniture, though (in contrast to at least Germany), they do come with a kitchen and appliances. Washer/dryer/AC are not standard but common.
A taxi driver in Singapore told me that the highway in Singapore is also designed for planes to land on. My own observations indicated that this was plausible.
At high-quality VC-backed tech companies? I guess it might be possible it you were super early.
Other developers have no idea of context either. Unless you have a way of enforcing that certain code is never exposed to user input (and I agree that a build-time-only dependency does solve that), sooner or later it will be.

Accepting regexes from user input is a really insidious class of bug that can go undetected for years. I've seen real outages caused by it, so it's absolutely worth doing something proactive about.
Funny you say that... I'm a PM and inherited a software product that was initially started by a Thoughtworks team. The software was based on microservices from day 1. The company c suite was sold into an MS architecture and gushed about how good it was. So much unnecessary complexity for an early product. What a nightmare.
They identified 7,000 cases on a planet with 7 billion people.
> not what the code in this package does

Here's `is-number` (https://github.com/jonschlinkert/is-number/blob/master/index...):

module.exports = function(num) {
if (typeof num === 'number') {
return num - num === 0;
}
if (typeof num === 'string' && num.trim() !== '') {
return Number.isFinite ? Number.isFinite(+num) : isFinite(+num);
}
return false;
};

Care to explain why these 5 lines of code need to be a package? To me, having something so simple be a package by itself is absurd.
Not OP, but Sinhala is classified as Indo-Aryan having developed when Buddhism spread to Srilanka and separate from Dravidian family of languages which is mostly limited to Southern part of India
Well, it's a problem of phrasing, but the other issue is the CCP wants any reason to put facial recognition in people's homes. Since taking a sledgehammer to a social issue like children's screen-time will cause no appreciable backlash among anyone who can't be sent to a slave camp, they can kill two birds with one stone by harnessing gaming addiction to a total panopticon. You can already go to prison there for using your phone to access Playboy magazine or the NYT, so, why not. It's their casino, and if you don't like it, see how you like your kneecaps.
I don’t see what the fuss is about. I do want my web browser throttled if it it still remains responsive but extends battery life.
I think of it as “in [any] orbit” vs “on [target] orbit”
You are allowed to use your personal license at work. https://sales.jetbrains.com/hc/en-gb/articles/207240855-Can-...
Big discussion earlier: https://news.ycombinator.com/item?id=27760573
Because it is descended from Sanskrit which has been known to be an Indo-European language since the very beginning of comparative linguistics.

It is genetically unrelated to Dravidian languages, but it does have a lot of Dravidian loanwords.
It’s shorthand for amateur radio operator (as opposed to professional, e.g. ship to shore.)
The age of autonomous war is already here
This is a really good distinction to make - people use the halting problem as an excuse to avoid doing any sort of analysis because it can't work in general and give a fully definitive answer - but most analysis solutions don't need to be fully general or fully definitive in order to be valuable.
boy/girl scouts, sports classes, music, any other extracurricular activities that you can send your kids to can help with socialization.
I agree. The kacha, kalari all look too similar to be a coincidence. Similar style is followed in TN as well.
Humans seem to have to try out every bad idea at least once, usually more than once.

I hate to be pessimistic, but I don't see how it doesn't become ubiquitous very soon, with all the downsides ubiquitous surveillance are going to lead to.
Yeah, that's why I used the qualifiers "most of the time" and "usually".

But even in that example, while the animation instantly conveys the high-level idea, it's still a bit magical: "I get what's happening, but not exactly how." To understand in detail what's going on, carefully chosen freeze frames with an explanation would probably be better, especially complemented by the animation. The ability to slow down, reverse, and interact could work too here.
The World's Tech Giants, Compared to the Size of Economies
There's no mention of an Annual Performance report in that article.

Are you referring to something else?
It's a way to manipulate reviews, giving the reviewers a false impression of the devices' actual performance:

> It's pretty troubling that the company decided to lower the device performance after the phone was released and reviewed by most outlets. Now customers aren't getting what they were expecting. This isn't just minor tweaking either. AnandTech's article shows some Chrome tests turning in numbers that are 85-75 percent lower than they should be.
In all societies, people don't care what you do with your kids if you beat them up. But they care a lot what you do with your kids, if you teach your kids to question authority. When I grew up we were taught that police were basically stupid, pathetic authoritarians with no power, who needed to hold weapons to prove they had little dicks. We were taught that anyone who claimed to know something about "God" was a fraud. And we were taught never to say these things in public, because the government would put us in a foster home and Dad and Mom would get arrested.

[edit] We were also taught that marijuana and other drugs help you relax and be creative, that sex within a loving relationship is a good thing, that there's nothing wrong with pornography, that prostitution is an important outlet for sexually repressed men who would otherwise become violent, and that guns are for idiots who can't talk their way out of problems. All of these are still very dangerous views in most of the world.
I’m perplexed by the opposite. Why do SWE salaries stay so low on average in developed countries outside the US? (Or maybe they don’t? Or maybe it’s not an apples to apples comparison?)
One company tried to make a residential version (called Ice Bear, IIRC), but it was unsuccessful. There’s no reason it couldn’t be practical, though. Especially with something like some prototype concepts which propose putting all heating and cooling appliances (refrigerator, water heater, HVAC, and possibly even a drying machine) on a single heat pump loop, ice thermal storage could become economical for single family homes in the near future.
Won’t you just get fewer hotdogs for the same price?
Thank you Steve. That's the world I grew up in and that's the way it should be.
Ireland. They supposedly have a live chat feature on their official website as well, but that was always broken when I tried it.
Rep. Ken Buck (R-CO) Speaks Out on Reining in Big Tech
> Personally, I think Facebook as a product is struggling heavily

Maybe in the USA, but Facebook is seeing massive growth in Southeast Asia, particularly in Indonesia and the Philippines.
Ask HN: Oldest RDBMS I can run on *nix or Docker?
I've been reading a lot about the origin of SQL and RDBMS's. I'd love to spin one up and and see how it compares to today's RDBMSs. I was thinking along the lines of IBM System R or an early version of Ingres.

reading a lot about IBM System R and
>I don't think putting cameras in minors' rooms is going to keep them safe

I wasn't referring to the cameras (" The enforcement is creepy"...), but it does make sense why a government would want to pass laws limiting gaming/screen use late at night amongst teenagers.

I went through it as a teenager and the lack of sleep causes all kinds of mental health and behavioural issues.
In the US in particular:

The right to life (in a negative, the government-shouldn't-take-it-away) is quite universally recognized - in cases where it's violated, defenders of that violation work very hard to craft a strong justification.

The right to free speech (again, in a negative the-government-shouldn't-take-it-away) sense is also a fundamental part of political discourse.

The right to private religious practice is broadly fundamental, though the right to religious practice of various sorts in the public domain (as well as the definition of that public domain) is hotly disputed.

Notably, the right to certain social goods are "fundamental" in parts of Western Europe (e.g. healthcare in the UK), but very much are not in the US. My general impression is that positive (the-government-should-provide-it) rights are much more rarely "fundamental" in the sense of being deep in a polity's consensus.
I see.

But I hope that both the mom and the kid will understand my comparison to free candy. Some moms even teach their kids to be cautious with that.
as a kid i had a cat that would look both ways before crossing the street.
>Corollary: When Rep. Ilhan Omar ("a frequent critic of Israel") says something, understand that the words she says must follow the Koran or she faces execution for blasphemy. For that reason, she should not be a US House member, and certainly not on House committees. Islam and the US constitution are opposing ideologies.

Yeah, you slightly lost yourself there. I mean, by any means of the word, she very much appears to be quite progressive...

And if you do want to go down the route of "For that reason" - we have a much larger issue with a member of the supreme court belonging to the batshit craziness of the handmaid's tale cult.
I'll bet an image processor that can recognize guns and gunfire and dead people would be even better.

I suspect that people are drawn to "The Bourne Supremacy" look and feel of their command center, just behind the parent-teacher conference whiteboard.
Creating Custom Ringtones as Message Reminders-Huawei Developers
> You can also use those grip strengtheners and hold it for 2 minutes. Repeat a few times. Supposed to reduce blood pressure.

Is there a study backing this up? The OP is research on people actually using the device. Lots of things, without studies, are mentioned on the Internet as providing health benefits.
How can you attract the right talent when competing with companies, like Google, Amazon (with their cash bonus payment model to compensate their weird back weighted RSUs) or Netflix being able to hand out offers without any of these risks?

An engineer with family is unlikely to take such a risk and rather join Google or even Amazon where compensation is guaranteed.
Not exactly the same, but I wrote StoryHarp (FOSS) which involved defining rules to create text adventures. It includes some different ways of looking at rules as a table, a browser, and a map. Maybe there might be some way for you to come up with a way to use it to much of what you want to do in terms of defining simple rules that a GM could click on to get options. There is no randomness in the system though, so a GM would have to introduce that somehow, like maybe by rolling some dice to pick from some options. You can use it in a web browser.
https://storyharp.com/
Falcon 9 (and Heavy) has not experienced any kind of mission failure since 2016, the latter period accounting for (if I'm counting right) 69% of its total launches including the Amos-6 pad failure (which did not actually launch). Its actual failure rate is 1.5%.

It's not a track record that deserves any more derision than its contemporaries. Doing so in such vague terms just makes you look like you don't know what you're talking about, which goes double if you're thinking not of F9, but rather of those big shiny rockets they've been blowing up in Boca Chica recently. That (Starship) is a development program.
https://archive.is/Z0UdE
Your comment doesn't add anything to the conversation. But for anyone else that is actually interested: the cost of JWST is really not that extravagant considering how much more capability it provides compared to HST.

> Not even including its four space-shuttle servicing missions, Hubble cost $4 billion or $5 billion in today's dollars just to build and launch," Dressler notes. "Here we are, building a telescope that is almost seven times bigger, it is cryogenic, it is operating 1.5 million kilometres away, and it is costing the same amount as Hubble did, if not less. That is remarkable, and this is probably the biggest scale on which we will consider building such things in this country."

From this article: https://www.nature.com/articles/4671028a
> How the British and other colonizers go unpunished

And who would do that punishment? Colonization occurred because country X had overwhelming military strength over country Y, defeats it militarily and then occupied it. Absolutely nothing new historically or humanly wise: it's like this since the dawn of time; and it's true in the animal world too. The only way for Sri Lanka to "punish" England is to become military strong but whining on a website (created by a descendant country of the said colonizer) won't do it. And if anything most of the former colonial powers, to the notable exception of Japan, are currently willingly punishing themselves already by allowing millions of people from former colonies to immigrate.
Because people who can't conform are a lot less dangerous than people who won't.
One of the best illustrations of the first major Google service abrupt EoL that was kind of the harbinger of the rest through the years: https://goomics.net/340/
Movie junkie getting down,

short moment of thinking,

frown.

Tries tricks,

still no more kicks,

despair.

Re-discovers fresh air.

Rehab!
It’s much easier to quit all social media than it is for most people to quit their job and find a new one.
US presence scared off people who stop women from being educated:

https://www.google.com/amp/s/www.nbcnews.com/news/amp/ncna12...

This may have occurred on some timeline of decades to centuries without imperialism (militarily or culturally).
I think scale is a really hard thing for us, but yes, being concerned about this is quite silly.
If the satellites are still working.
Surprisingly simple design, actually. The water sits in a large tank with plenty of room to expand and contract. Pipes filled with refrigerant run inside the tank. Here’s a photo: https://images.app.goo.gl/Td6RdFbuVE8QJAmu6
Just to be clear, I didn't make the post.

I just happen to be a fellow wonk who also has been in the position of bringing something that was a cool one-off idea to market, where just because I captured some cleverness and connected some dots, doesn't mean I'm the one to productize it.

Just to be clear, I did not make the post or am affiliated with the website. I too would like to explore their product.
From what I hear from my friends who edit video, pro video editing workflows can involve some pretty hefty bitrates beyond what 1gbit networking can handle.
> There are, however, countries that have achieved zero CoVID and then reopened and sustained zero CoVID.

Is that actually true? The big success stories like Taiwan and Australia seem to keep getting imported cases and needing to lock down again.
I didn't like the beginning of that article either. I ran with it at that moment because it can take a while to dig up references and I really liked the DNA-level explanations in that one, which I've been following as much as I can and have grown to prefer. I feel like I've been able to cut through a lot of noise that way, and I'm learning a lot.

The virologists describing things at the that level seem to have converged on similar set of possibilities, and the need for additional data to be certain of anything. It's my understanding that they've been saying "man-made impractical if not impossible, probably natural spillover which happens all the time, lab leak is not impossible, need more data" since last spring.

It could be that non-virologists argue about this more than virologists... lol
I didn't know about droidscript before, but because of this news I downloaded it.

Loving Android.
This is actively going on where I work. Granted, it’s a financial company, so they take security pretty serious. During our last release, we had to go through 3 different teams, all doing different security scans.

One if them is scanning all your dependencies, and its so frustrating. Because that team obviously has no idea what any of the dependencies do or how they’re being used. All they see is a red flag, and tell you to fix it. Good luck when they tell you this days before a release, and a week after the code is frozen. They’ll just block your release without a second thought.

Funnily, in our last release, some of our NPM packages were flagged as a risk, obviously without explanation. The thing was, these packages where dependencies of another package. Obviously we can’t go around updating open source code, just because the security team in our company told us.
This is nice but trading crypto is the only way I’d ever been able to retain any of this stuff. You sit on an exchange without need for a broker and see your order go on the books or if its a market order how much liquidity it absorbs and how much price moves… its a 100x learning. I used to read books about market structure but all this stuff only helps after doing it.
Well you’d just make the ice whenever it’s cheapest, taking into account the effects of cold air and of electricity prices. In the future it might make sense to make the ice when it’s warm out because power is nearly free at those times. But a smart building automation system could know when cloud cover is predicted and make ice the night before.
Not to mention the extreme cults described above aren't super cool with women holding elected office.

She does say some outlandish things, but most of it's better explained by spending too much time on Twitter.
Maybe cows enjoy the experience and they help spread the spores.
> Just because some other variant was found to be dominant elsewhere a later point in time does not appear to suggest anything contradictory to me.

That's the thing, the early variants Forster identified could have migrated in either direction. Nobody is questioning the differences between his identified A and B variants, just the directionality. The expert consensus seems to be "too early to know for sure".

That's what I'm saying. Forster might be right, and this came from south of Wuhan. Even his critics say that he may not be right, they don't say he's wrong. We don't know for sure.

Can you appreciate the difference? You seem to be saying "this definitely started in Wuhan" when it appears that is not certain.
Yes, that was my hope also. As it becomes more common to not have a cliff.

It was just strange that the recruiter couldnt discuss this further or at least give an offer with a nice cash compensation that would be paid out monthly (sort of like how Amazon does it) to compensate for cliff.