skysight-inc/HackerNews huggingface dataset:
Legacy. Plus the ODBC layer is sort of 'broken' then add on nearly 25 years of examples on the internet.

We have 2 modes of using ODBC/SQL.

Almost tightly bound. Basically you have a bit of query string with question marks in it and you bind out your data points. Either for sending/receiving. Even passing in prepared strings could be an attack vector if you know what you are doing. As it breaks one of the 'rules' of secure programing trusting the client to tell you the correct thing. This however is the currently the only best way to do it, unless you go full on with the stored procedure pattern (which can still have injection attacks).

Loosely bound. Here is a totally composed string ready to go just run it. Also a good way to make easy SQL injection attacks.

Both involve string manipulation.

Then a requirement of that interface is it has to sort of kind of work with at least 4 different SQL systems. Anyone who has had to port stored procs between some of these different SQL systems, can attest to, that they are not the same, except in some very basic ways.

On top of that there are a lot of bad examples out there. But also once someone finally kind of gets something to work they may cut and paste that method. Which may or may not be good. Plus SQL has this stigma for many years of 'being hard'. I know I ended up as the 'SQL guy' for awhile because many in some of my orgs would not touch it.

That is what the runtime environments have to deal with. Some paper over it with an API abstraction, some are better than others.
A Worm trying to hold on to his domain!
Maybe, but I know a family member with true ADHD, and it's quite different.

For one thing, he gets along with other folks, much better than I ever did.
While interesting in itself, I'm not sure how this is relevant to this Nomad blogpost, unless you tried Nomad before starting to use Kubernetes and went with Kubernetes anyways.
> how we can be led astray.

The first thing reporters should adjust is their honesty. Your fears about how a message could be perceived negatively becomes a self-fulfilling prophecy if a lie is detected. That a lie will be detected in today's world is very high, so calming or noble lies carry a lot of risks.

Additionally it should quickly communicated what people can and cannot know. If an unknown disease breaks out, nobody knows how dangerous or deadly it is and what helps against it or not. You don't even need a good justification if you enact restrictions as a precautionary measure with clear boundaries for reevaluation if civil rights are affected.

I think only high trust countries went through this relatively unscathed.

As a side note, emergencies are taken a lot less serious because of disastrous and incompetent anti-terrorism policies. We had emergency legislation throughout the western world for the last decade and a half.

> Instead, we need to develop a realistic, informed and deeply pragmatic approach to our shortcomings without ceding ground to the conspiracists, grifters, and demagogues

Wrong lesson, you just need to be better sources of information. Trying to silence them is the opposite of a sensible approach. This has been done to a scarily effective degree, people have basically been unpersoned. It did not work, you have a bad result now. That is a fact and needs to be accepted first.

I assume when Covid is done, there will be a long discussion about how effective vaccination has been in retrospective. You might want to stay truthful here since it will affect further trust.
I'm the author of that blog post. So,

- I did not use it as a backup system. Due to circumstance, my backups were borked and I was too busy/poor to fix them up. Syncthing was used to sync my passwords, Org mode notes, and a specific two-way sync folder with the phone. Importantly, the first two were read only, i.e. the phone only had read access. Regardless, stuff on the remote, i.e the computer were deleted.

- I don't blame Syncthing because I lost my stuff or I had no backups. I blame them however because their software failed destructively. It should of course fail when the config file is weird, but deleting files on two devices despite permissions only allowing readonly access is tho unacceptable. This is kinda equivalent to nginx deleting your htdocs because a symlink in sites-enabled was broken or /.../sites-enabled was a file instead of a folder. If you don't have a backup of htdocs, that's your fault, but that doesn't mean it's a sane way to fail. The best way is to panic and tell the user: "I'm not touching files before this is fixed". Even rm(1) in coreutils has this sort of precautions, not allowing you to run "rm /" willy nilly.

- I should admit that I don't really make that distinction very clear in the blog post itself tho. It was written with anger after the incident, so I was not as nuanced/clear as I could've been.

- The point of the blog post was to advice against relying on Syncthing and to point out that its failure modes were coded sloppily. Tbf it was more like a note to self because never had analytics on my website so I had no idea if anybody read them with any frequency. I've seen it be linked from a couple places recently tho, and I haven't changed my mind, partly because I haven't been keeping up after seeing attitude like https://github.com/syncthing/syncthing/issues/4345

Afterwards I did go back to using syncthing for a while to sync files b/w laptop&phone but confined to a specific share folder only. After that brief period I've been relying on KDE Connect to push files between a Linux laptop and an Android phone. I botched backups a couple more times tho, as the big banner on the website testifies to.
I've banged my head against some CORS puzzles recently. That's a pretty good guide, but I actually know an extra quirk that was missed:

You know that nice "Access-Control-Allow-Credentials: true" header? In theory, it means that you can make authorized requests with cookies included to the cross-origin API. It actually has some extra rules that aren't obvious though. The cookies won't actually send unless they explicitly have "SameSite=None" set. Which itself isn't valid unless you are both making the request over HTTPS, and the cookie also has the flag "Secure". See here: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Se...

The cookie logic is kind of mysterious. When everything is set up correctly and it works, it's pretty invisible to the code making the cross-origin requests. But if it isn't set up quite right, it will just not work, and it can be pretty tricky to figure out what's wrong. The whole SameSite logic is a pretty interesting kludge too. Ideally, most things would be SameSite=Strict, but that also means that links the user follows from third-parties to your site won't include cookies, since in theory those requests could include GET params doing who knows what.

Digging into all of the CORS rules and how they interact is almost an archaeology project into how the web was built and all of the weird things that both legit sites and malicious attackers have tried to do over the years.
The idea is to use "Git magic" to make it all work; there is no cherry picking of patches. Instead a "hack on Git merges" is used, which preserves the SHA1 values as they are in the existing stable branches.

While that is really good from an operational POV, one of the main features (the main feature?) of the SHA1 was that it is dependent cryptographicly on the preceding commit and recursively to the initial commit, giving assurances that the whole tree is valid and unchanged. It seems like "hacking on Git merges" like it would break the cryptographic assurances.
Antiviral compound blocks SARS-CoV-2 from entering cells
Maybe it will change post covid, but capital wants easy access to workers. That's why they like to concentrate in certain geographical areas.
Nomad Pack (package manager for Nomad)
Why People make Irrational Decisions every single day?
"The decline of Django" -- should come with what replaces it note. Where people are fleeing from here? or which new tech is better for these requirements?
You're listing a lot of excellent reasons to _choose_ Linux over Windows, but you aren't making a strong case that people _are_ using Linux over Windows.

In order to optimize adoption, a tool should aim for the platforms that potential new users _actually use_, not the ones that they _should_ use.

As of 2021, 45% of Stack Overflow survey responders use Windows [0], while 25% each use Linux and MacOS.

And I am going to advance the hypothesis that the subgroup of SO survey responders actually skews more towards Linux, based on the fact that the sub-subgroup of professional developers were more likely to use Linux. I expect that the much larger set of developers who don't take SO surveys are less likely to be professionals and therefore less likely to use Linux.

Windows is not quite as dominant as it used to be, but poor Windows support will still cut down your growth potential by half (and, if my hypothesis is correct, likely more).

[0] https://insights.stackoverflow.com/survey/2021#most-popular-...
The Sniff Test
didn't the lockdowns start under a republican administration?
It might just be me but I really wish 95% web apps/sites didn't try to be single page apps. They have obscure failure modes, they're harder to QA, they require huge amounts of bandwidth and they're expensive to build.

Django's postback model might not be a model of what front end developers want to use for their backend, but it's definitely a model of how I like my frontends to behave - sparse and minimalist with a limited number of possible behaviors.
Funny, I was going to bring this up.

Calgary used to have one of the highest concentrations of head offices in Canada. The tax rates here were minimal.

I had some friends who did presentation and multimedia development for those companies who were suggesting I move here in the early 2000s since they were swamped with work.

Tax rates fell in other provinces and those head offices relocated to take advantage of the new rates as they tend to do.

People want to blame the oil prices and covid but there was a shift in head offices out of Calgary well before either event.

The main driver was that other provinces beat Alberta to the 'race to the bottom' in terms of tax rates.

It is an indicator that development priorities are ass-backwards. We try to attract big corporations thinking they will bring jobs instead of making cities liveable and attracting or building smaller businesses that will actually stay and help keep the city and the province economically feasible.
I swear I saw an article on here a few months ago about the decline of Rails
Build great things? Come on, it is a job board depending on network effect. I mean it seems fine and all but it is not a great thing.
Pydantic's BaseSettings has cured my configuration-DSL itch. You can type in (typed) defaults in Python and have them overidden by env vars.
Would go FastAPI for new projects.

Either is good if what you are building is something small and very focused or if you already know exactly what you want to build and want to have freedom making decisions about most aspects of the application.

But if you don't know yet what the product will be, a battery included framework like Django is very nice to get out the door quickly without having to worry too much how to structure the code, what library to use for x, etc.
I used this once to debug live with coworkers. Now I use it 100% of the time for local builds. Super useful when doing front end work and you want hot reloading across multiple clients & you don’t want to lose things like Cloudflare Workers or Page Rule effects.

Cloudflare for Teams makes it even more powerful where you create a tunnel to a local build & then restrict traffic on the subdomain to a specific G Suite group in your org (ie QA or Developement).
I think they did (UK).
same experience here. 'Schwalbe Marathon Plus' are the only pneumatic tires I have used on a wheelchair that last more than a few weeks of hard abuse.
Never used anything but Django REST Framework as far as Django goes. Couldn't be happier. Love the ORM.

https://www.django-rest-framework.org/

(I have other controversial opinions like GraphQL is the new XML SOAP)
That's probably not the right use case for Django (I say this as someone who defaults to Django for new projects unless there's a compelling reason not to).

Something like FastAPI would be better suited to a narrow use case like that, as that's what it specializes in.
The only point I can sympathize with a little bit is the default admin UI looks, which could be a little more modern.

In any case, I don't know of any one other framework with a remotely comparable admin interface in terms of capabilities and usability out of the box, so there's that. I'd be happy to be proven wrong.

For everything else (even async with channels), as long as you don't stray too much from the django way, you'll be immensely rewarded by how neat and easy to navigate even large applications look.
Only restaurants are checking the status for dine-in. Shops don't.
Reading the article I couldn't stop thinking: Isn't 3D space perhaps being mapped by a "crumpled" 2D space filling surface?

Real world environments are rarely really 3D, and a 2D surface is perhaps the sweet spot in complexity/degrees of freedom for most practical cases? This would explain why 3D mazes are so much more disorienting than 2D mazes, for example.
Where are all the graphical artists at?

We had an Ask HN here, like yesterday.
Conservative isn't the same as libertarian. Libertarians vote for Conservatives because they're the closest thing they've got, to my understanding.

If they have a choice between people who overtly want to move more power to the state, and those who say they don't but sometimes do, they're going to pick the latter.
Strong Calgary booster here though I'm originally from BC (~20 years ago). I was one of the economic migrants that caused the population to explode as were many (most?) of the people who moved here in that period. If you were voluntarily willing to pack-up and move across the country for work, demographically you were typically: young, educated and motivated (vs. historically it was desperate and motivated). Calgary still feels "small" for a million-plus people and very meritocratic. It has a neighbourly feel that is very Canadian-prairries, less than an hour to the mountains and not as cold as you might think (outside of February) due to chinooks.

If you're looking for exciting cities I'd stay away from almost ALL Canadian and US locations, but if you're looking for a big cities that supports a lifestyle that's not urba-based, Calgary is pretty great. Everything my family does is either walking distance or a very short drive (I live in the NW beltline) yet I'm very close to all the outdoor-centric activies I love.
Meanwhile the US government is gatekeeping the right to earn a living with a vaccine mandate...how are we any better? Every well-educated liberal voter is racing to implement GATTACA...
The quoted claim doesn't say anything about SPAs providing insulation against bad management either?
Yep. I wrote a web app a few years ago that was moderately popular in its niche, using Django and htmx's predecessor, intercooler to add interactivity. I think the big issue with this article is that the author fundamentally wants to write client-side apps, and Django is a server-side framework, so it's not really meeting his needs.

The async issue is valid — I have wanted to use server-sent events with intercooler/htmx — but the answer seems to be just to use Django Channels, or be patient and wait until the async features are actually finished.
> the courts threw out a consent decree going back to the 1920s that blocked packers from engaging in a variety of anti-competitive practices, such as owning their own feed lots.

Interesting. I've spoken to the owner of a small slaughterhouse (last year), and they were looking for others to run more feedlot for them then; being firmly of the opinion they couldn't legally do it themselves. I wonder if the rules apply more to smaller places.
I don't know why a ID requirement would change that, as you don't update IDs every year. If I managed to get registered in multiple locations then voting with a freaking passport wouldn't stop me from voting at both locations.

But since voting records are public, this would be trivially detectable.
Do you know of any articles or information in general, how these hard things (ip control, bounce, ...) are done?
^ This. As a 45 year old recently diagnosed with ADHD, I realize how much of my life was described by things like this. The more I learn about ADD/ADHD, the more sense I make to myself.
There is no optional heads up display, only an optional warning on the already present display.
> Alberta is designed for cars and public transit is a bolt-on, expensive afterthought.

Being downtown even in the afternoon when there are people there is horrible. There is so much traffic and noise that you don't want to even bother exploring or checking things out.

I avoid downtown.

> I really wish this place would focus on it, but at times it feels like the province is allergic and negatively responds to having any sort of culture.

"culture' doesn't fill your campaign coffers and provide 'incentives' to local politicians.
iirc, that was on the spindle axis - i only was gently pushing the drive arm near its supporting point to avoid it touching the platters (chances are i did make it touch the platters)...

Mind you, this was not in a clean room and i tried to be as quick as possible to not allow too much dust into the case..

Here's an online article, might even be the same drive (this was a external WD drive, not sure about the capacity, i think 500GB or 1TB): https://dataanalyzers.com/external-hard-drive-western-digita...
Nomad gets the job done. What you end up missing is the huge ecosystem of tooling and knowledge that comes "for free" with Kubernetes.
It might be pretty sensible from the government's perspective, though. De jure freedom of speech, but de facto not.
So much flamebait. These kinds of comments aren’t good for anyone.
How much money I make on Twitch and YouTube playing Magic: The Gathering
The article says the trip is "an 1,800-mile (3,000km) road trip across western Europe".

Are you allowed to drive around in self built vehicles in Europe? Or did they convince all countries they cross to give them a special permit?

How does that even work? When the polic stops them and says "The papers of the car please", they say "Hey, check this out, we have a letter from your chancellor who says we are cool to do this". Then how would the police even know how to check if that is legit?
Seems like a strange bit of feedback to me. My company uses Django as the backend for our REST API and it's simply phenomenal. Django isn't a complete solution out of the box, but that's why things like Django REST Framework [0] exist. It supports JSON-based views and has an excellent serialization layer that can map directly to the ORM models.

This setup does NOT help with serving our frontend app, but we're using React for that anyway and I'm not sure I'd want our frontend so tightly coupled to the backend.

The fact that Django is mature and extremely stable between versions is a huge selling point for us. I'm not interested in making sweeping changes to our backend just because someone invented a new paradigm that may or may not be helpful to our app (eg, GraphQL).

That said, rendering HTML templates server-side does feel pretty archaic these days. I think it would be great for Django to take a more API-centric approach for a default installation. I can imagine that anybody coming from the JS world would feel totally out of place in terms of how Django works out of the box.

[0] https://www.django-rest-framework.org/
Right, exactly. This is manually engineering the lower features, which CNNs just learn.

The chief advantage of this technique is a) certain regular wavelets have performance benefits over convolutions, especially when talking low level/FPGA/ASIC space b) being not learned can be beneficial, as these is nothing to overfit.

I can see it being handy for embedded/rasppi like applications. In particular, you can festoon a crude face detector with a dozen Haar filters.

End to end training is just soooo convenient though.
You should be ok with consul, ansible and templating your docker-compose files. Might take some time to set it all up, but should be ok.
The fundamental premise of this post is that a boring web framework is bad, but making basic websites doesn't need to be an exercise in bleeding edge frustration.

Django, many years later, still presents a straightforward solution to a straightforward problem, (almost) all batteries included.
"This app isn't available in your country" (Brazil).
There are multiple types of ADHD, so you two may be discussing different ones. The commonly used categories are

1. primarily hyperactive (cannot stay physically still),

2. primarily inattentive (”daydreamer”),

3. combined type, with features from both 1. and 2.
It could be a factor for sure. I don't think campaign finance reform will ever happen but whistle blower could. I've given up hope on the altruistic billionaire to do things the government is reluctant to.
I agree with this.

Much of the square footage is devoted to entertainment pursuits that don't have a roof and close for the winter elsewhere in Canada.
This sounds very much like me. Give me interesting work and I won’t stop, give me mundane work and I’ll find more interesting work till I have to do it. I’m 27, how did you end up getting diagnosed later into adult life?
Django is good. But I’ve used laravel and .bet core a lot before trying django for my personal projects. Honestly I get what the author meant by the docs is overly documented. It’s not to the point, also it’s hard to find things.

Aside from all the sweet things you get with django, creating an api only project feels very “hacky” for me with an extra package to install (DRF)
1) Documentation is too verbose

2) Onboarding new developers lacks IDE specific tooling for free

3) Admin GUI isn't great

4) Async support is still incomplete

5) Static types aren't used in Django

6) Django is MVC which isn't useful if you just need a light V

7) People ignore other, newer tech because Django exists

What??? 4 and 5 are legit complaints, the rest is literally the nittiest of picks, in my opinion. You don't like a framework because it's so good, people don't experiment with newer frameworks?? And that's in your article about the decline of that framework?

This is a weird article, man. I am surprised they haven't figured out async yet, and I guess if you really like static types the lack of them in Django would be annoying, but otherwise this just seems like you set a goal to write about a topic, and forced yourself to come up with an article you thought hasn't been written before. Like, it feels like you wrote the title of the article, and then tried to come up with the rest of it after the fact.
There's no true ADHD. ADHD has many different manifestations. The one trait I have seen described that seemed most common was "difficulty with impulse control"
> Now, just a few months later, these countries, along with 44 others, have surpassed U.S. vaccination rates. And our failure shows: America continues to have among the highest deaths per capita from Covid.

Tying deaths per capita to vaccination rates in such a direct fashion is a bit disingenuous.

The US also has high rates of comorbidities known to increase the likelihood of death from COVID, namely obesity and diabetes.

Per https://www.cnn.com/2021/03/04/health/obesity-covid-death-ra...:

> The report found that every country where less than 40% of the population was overweight had a low Covid-19 death rate of no more than 10 people per 100,000.
sorry, was looking at the jpy price, and didn’t remove enough 0.