skysight-inc/HackerNews huggingface dataset:
A WordPress plugin may contain hundreds of interdependent npm packages all neatly bundled and minified. Without access to a package.json or package-lock.json it is quite hard to find out which individual packages have been used. Quite often there is also no public repo available of the development files.

To give an example of my process thus far:

Someone in my team wants to see if we can use plugin X. I’m downloading the plugin to have a look at the code. Luckily this plugin has included a non-minified version of the js file. I can derive the use of npm packages from this file. Using Snyk I have a look at the first package mentioned. It’s axios. The included version is vulnerable (high & medium severity) and has been for almost a year (Note: the last version of the plugin is 3 months old and does not exclude this vulnerable version in it’s package.json which I found in a Github repo later on).

Since I have no package.json nor package-lock.json (all I have is the distributed build) I can’t easily update the npm package. I have no clue as to how this package relates to the other packages and how their version might depend on each other. Even if I would update the package, all other users of this plugin are still vulnerable. I contacted the plugin author. He tells me he will update the plugin as soon as possible. The plugin is (as of today) still not updated & has not released a new version. In the meantime there have been two new versions of the axios package released.

Every user of plugin X is still vulnerable to the issues mentioned on Snyk, but is this a real problem in this specific WordPress plugin context? I’m not sure how to interpret the high & medium severity in the context of this plugin. How exploitable are these issues & what is the impact of the exploits in the context of this plugin? Do I need to be a logged in user? Is this something which can be triggered by any visitor? What am I able to do when I can exploit these vulnerabilities? I can only try to find answers to these questions if I’m willing to invest a lot more time into this, which more or less beats the purpose of using a ‘ready-made’ WordPress plugin. And this is just one package of multiple npm packages used in this plugin. Packages which also have their own dependencies as well….

At this moment I’m wondering if any WordPress plugin using npm packages can be trusted at all.

ps: The way the npm ecosystem is structured is, in my view at least, problematic. Often packages are not like libraries as I’d expect, but look more like a function call or method call. I’d prefer to write these short pieces of code myself instead of depending on external code which also includes extra risks. The very rapid release schedules makes it even harder to trust external software (like a WordPress plugin) using npm packages as it seems they cannot keep up with it.

I’m sorry if this seems like a npm rant, but I’m seriously looking for methods on how to deal with these issues so we can use external software (like WordPress plugins) built with npm packages.
>There’s a lack of this inner thought which is an actual condition people have

I find this so hard to believe. Are these people even conscious? I can solve math equations, think about my life, write code... all without any inner voice, especially when I'm in a flow state. When I do have an inner voice, I would describe it more like talking to myself without actually mouthing words. But never, ever did I have no "inner thought" at all. Like, I'm always aware of myself and that I'm thinking.

The “mind’s eye” stuff you described very well, I think.
There are too many books and too many songs. The problem is no longer accessing them, it is finding them in the first place. Generally they need marketing to be discovered. This is where big name publishers come in.

If you find a way to disrupt the recommendation industry you will be ahead of even Google.
Oh good. Think everyone here is trying themselves right now.
I don't really see anything when I picture stuff in my head, it is more that I know how something looks or should look or could look and it's much less than a picture, but for sure more than words.
And for the inner voice, I hear my own voice in my head, it's like I'm talking to myself all the time, like a crazy person. ¯\_(ツ)_/¯
Not a good example, IMO. A triangle is defined as 3 points with 3 lines connecting each consecutive point. A better example would be: think of Tony the Tiger, now what colors are his skin, stripes, and bandana? But that's also not perfect because people are along a spectrum in the amount of detail they're able to see.
The kind of sensors you can put on a plane or satellite simply can’t penetrate seawater effectively. It absorbs radar, dissipates heat and light. Sonar sound waves in air mostly just bounce off the ocean surface.

This is why submarines are so stealthy and therefore militarily useful. As long as they stay quiet they’re almost impossible to detect without using relatively short range active sonar.
I have a Quest 2 and had a Vive before that. The Quest 2 is way more convenient. But I'm still too tired/lazy to put it on most of the time and would rather veg out on the couch.

I can't be the only one who feels this way?
> The Fed has essentially trapped us in a system where the likes of blackrock get access to essentially free Fed printing press money right of the rollers that they then use to buy up real assets at inflated prices, which only drives up the inflation that thereby also drives up the value of previous purchases at near zero rate interest.

It's a trendy thing to say, especially in certain political circles, but could you substantiate it with something from a serious, non-partisan economist? AFAIK, for example, inflation isn't much related to it - rates have been very low for a long time, sans inflation.

> the Fed has the tiger by the tail and is paralyzed with fear

Again, anything substantive to support this? They are 'paralyzed with fear'?
The air / water interface makes it impossible to get any useful sonar data from an aircraft. Some military helicopters carry dipping sonar that they can temporarily lower into the water, and specialized aircraft can also drop sonar buoys, but those are designed for detecting submarines and are mostly useless for bathymetry.

The US Navy does regularly operate in the South China Sea. In fact the USNS Mary Spears oceanography research vessel was there recently, presumably gathering bathymetry and other data.

https://www.marinevesseltraffic.com/vessels/USNS-Mary-Sears-...
I sold another condo in this same complex 2 months ago through a real estate agent. Far more painful process and got much less. Also see here: https://news.ycombinator.com/item?id=29087989

Opendoor still holds it, Zillow is already marking down a similar one by 14%.
It reminds me of Nihad Abbasov who wrote the scripts to automate routine tasks like texting his wife and make his coffee.

https://github.com/NARKOZ/hacker-scripts

https://www.thejournal.ie/programmer-scripts-to-do-his-job-e...
> The whole meaningless, punchline-less joke "Microsoft sux lol" thing

You can't mention that without context. Why did Microsoft have a bad rap? Because they'd done bad/ill-considered things and it came back to bite them. The browser wars, Balmer's "linux is cancer" rhetoric [0], trying to create a "Microsoft internet" instead of the Internet, "Embrace, Extend, Extinguish" [1] more generally. To name but a few.

The Zune might well have been a good device (don't know), but the "Microsoft sux lol" (as you put it) of the time wasn't meaningless. It was entirely of Microsoft's own doing.

[0] https://www.theregister.co.uk/2001/06/02/ballmer_linux_is_a_...

[1] https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguis...
To further clarify, unlike the ships of WW II, today US subs mostly exist for a nuclear second strike capability. The strategy assumes the enemy doesn’t know where all the submarine nukes are, so they’re guaranteed to face nuclear retribution if they initiate an attack.
> Ardour isn't quite my cup of tea. I personally want to create something with a workflow akin to Live/Bitwig/FL.

https://www.youtube.com/watch?v=EiwUN7hz6eU

Scene launching started working yesterday (on top of clip launching).

All of our music<->audio time conversion stuff now lives in its own library, called temporal

https://github.com/Ardour/ardour/tree/master/libs/temporal

It's likely that there will be a wholesale renaming of data types in here, because "int62_t" is a little too generic, and at least one of our long term devs is strongly against builtin-like names (eg. timepos_t) for things that are actually our own objects.
PipeScore – FOSS Bagpipe Notation
Yes. You make up for it in volumes.
Only where you go and record data to create said maps.

Sonar systems have not mapped the entire sea floor, and as others have pointed out, sonar is the main effective way to create such a map.
He wants to be in on the IPO I think, buying when it's reached the stock market is too late for that.
Sure, that's also what sport coaches, musician teachers, people teaching cooking on youtube and librarians say.

Also you should get 8 hours of sleep, buy food at the farmers market, spend time with your familly, meditate, get this GTD rolling, and learn a new skill for your carreer.

But honestly, the truth is, as soon as VR is cheap and comfy, I think people will rush to it anyway for one reason: porn. So the metaverse can grow, if like in second life, it allows for porn to develop. But since FB tend to want a family friendly experience, I think we got a betamax vs VHS situation here.
A programmer wrote scripts to automate his job, email wife and make his coffee
Homeless students at LB college can sleep in their cars in parking structure
Why do people cite fictional examples as if they matter at all? Honestly wondering. It's certainly good for imagining the possibilities, but this thread is talking about something that could actually happen.

Facebook itself would be a better example to your point as it's the largest social network.
Similar accusations against scientists have been ongoing for decades and I don't think the 4th wall dynamic is playing out at all like you're expecting. Realizing that there are parties with agendas in the scene also implicates scientists. I think the result has actually been that adversaries have seen unprecedented success at discrediting scientific institutions and scientists themselves.
I left my last contracting project around six weeks ago because of encountering this attitude - yet again.

I wrote my first custom business program 40 years ago. Since then, I've only been on two teams that didn't exhibit this attitude.

At this point, I really don't want to continue programming for a living, precisely because so many people adamantly refuse to fix problems with painfully obvious (and quick and cheap) solutions.

I've given up on trying to get people to change their behavior. If I do continue programming, my approach will be to try to find one of those rare teams that actually changes and improves.
Like Web3.0 we are gonna get every shade of meaning of Metaverse shoved down our throats for the foreseeable future.
The Google+ Rant – 10 Years On
They also released "Backblaze Drive Stats for Q3 2021" today:

https://news.ycombinator.com/item?id=29082379
Steve Wozniak: 'I got the new iPhone; I can't tell the difference really'
It was also doomed because of Google's terrible invite system.

The few of my friends that got in early couldn't do anything because there were so few others, and everyone else just forgot about it months later after the hype died down.

No idea why they keep doing this.
Is there something similar for SSDs?
The article does say, "All these papers, and nearly all that Morris then went on to design were printed using hand-cut woodblocks loaded with natural, mineral-based dyes." Is arsenic classed as a natural, mineral-based dye?
Declarative configuration management systems solve this by unchanging your configuration after someone messes with it manually. :) Hard to forget to change the automation when it persistently undoes all your hard labour.

You can help solve the problem with technology, you just have to make the solution easier than working around it.
Formatting and readability are two separate concepts (as other replies have pointed out). I'd like to specifically point to a fantastic example of what we mean when we say "readability": https://www.youtube.com/watch?v=wf-BqAjZb8M

Someone with readability in a language, who keeps up with the style recommendations, will generally produce code that is easier to read by other engineers.
> Why can't satellites map the topology using something like RADAR

If you were close enough, say in a plane, you could do something to cause a soundwave to propagate through the water. Say you fire a femtosecond laser pulse or blast it with an ultrasonic pulse. You could then, probably, use a second laser to pick up the reflections as disturbances on the surface. Otherwise you're probably stuck, since RF doesn't propagate well through a conductive fluid. Submarines can communicate somewhat using very, very low frequencies of electromagnetic energy, but the problem with that is the resolution at those wavelengths would be very, very poor.

The best bet at this point in time is probably to just make a bio-mimicing, underwater drone and map under the surface. If you were really clever, you'd just hook some electrodes into a whale's brain and make it carry your mapping payload, using whale sounds to map the ocean floor. Not very nice thing to do to a living creature, but we've done very bad things in the name of national security before.
Yep. This is definitely a factor.

The insight that the technical is not entirely separable from the social is an important one, imo.
I agree with most of what you've said, but I think the core issue of affordability is not dependent on private enterprise profits. I think the core issue in California is that its so difficult to build homes in high density, and NIMBYs prevent new development everywhere, creating more and more sprawl as people move ever out of the range of existing NIMBYs to form new towns, where they in turn become NIMBYs.

If California would allow anyone to build an apartment complex nearly anywhere (as Minneapolis does in many neighborhoods) then there would automatically be more housing, and more affordable housing for blue collar workers and entry level workers. Instead, we have so many neighborhoods where each house is forced to be on .25 acres, or .15 acre, with forced single family occupancy. Affordability is a construction, zoning, and permission problem in California.

And that high expense for housing then trickles up and makes everything more expensive from child care to healthcare to services ... as everyone has to pay workers ever more just so they can get a roof over their heads. People are making $25/hour with no college degree and feel poor.
Good luck Backblaze! It is a tough market for sure, especially with recent announcement from Cloudflare.
I underestimated Minecraft. I knew it is important, so I tried it out two years ago but dismissed it when I got killed by a zombie. I thought, fuck it, I don't need anxiety when it gets night in the game.

But then a friend of my son played Minecraft.

I installed Minecraft on a Chromebook then I watched the children figuring out Minecraft. I figured out lot of things, too.

When I discovered that they created a railway and put monsters onto the trolleys, first I had a hearty laugh then I got intrigued again. I discovered that Minecraft Education Edition has a coding environment similar to Scratch from MIT. I showed them how to create a giant ice cube and dig narrow aisles inside it. Next they created a giant cube of TNT and set it off.

Anyway, I think what will happen: you can't centrally create a world. You need people. So when I read the article I found myself just nodding.

People will find ways how to define and use the metaverse, not that company.
Dismantling Student Homelessness in California
The market changing is different than the government commandeering your property and requiring you to let non-paying tenants live in it.
This is super cool work, congrats! I've been looking for a good low/no-code tool to build a static website to sell some assets I've developed, wondering if TypeDream can fit the bill.

How easy is it to:

+ A/B test pages (e.g. for conversions)

+ Measure user interaction to understand incoming referral, bounce rate, time on page, user journey, etc.

+ Integrate with other automation tools like n8n.io

I'm new to this so apologies if some of this is better served by other tools (suggestions welcome!).

For example, in addition to the stuff above, i'd like to:

+ send transactional emails to customers who buy a product

+ send update emails to customers when the product gets an update

+ add orders to Airtable/Google Sheets to track sales
(these could be handled with some automation integrations like n8n)

On the site itself, is it possible to:

+ allow comments (simple way to do this might be to include a twitter post with the article URL, displaying the twitter replies as comments on the TypeDream website)

Thanks and really cool work!
Like some other commentators, I have no “inner voice” and the idea of it seems bizarre, and seems like it would be super annoying! When doing mathematics or programming there’s just a conceptual structure that I manipulate or think about, and then type in some code that corresponds to it.

When I read a book the characters do feel realistic to me and I do sometimes see (in a patchy way I suppose) scenes. But when reading, the words have no sounds, they just go straight from the page into my brain. Written puns and poetry don’t really work for me.
The lesson for me here is to actually have scripts written where the business logic is clear to see and change.

This is a workflow in a python script but could also be a tool just by adding argument parsing. But also tools can be called from software pipelines and have tools to execute this for us (automation).

Look at https://aosabook.org/en/500L/a-continuous-integration-system...
Zillow doesn't have experience or data in the real estate market? But, investors traditionally tied to securities do?

One seems like an entrenched data-hoarder. The other seems like a "we're smart enough to pivot into this" group.
Zillow to close its home-flipping division, lay off 25% of staff
"Search by the Second Foundation" (the second half of the book "Second Foundation") was one of the very last science fiction stories he wrote, apart from the spate of novels in the 80's.

It gets confusing because once he was famous, magazines would call him up asking for a story and he'd give them one that he'd written between 1939-1951 that had been rejected. They'd accept it because he was now a legend.

So Second Foundation, at least, is not early Asimov. It's arguably late Asimov. And it's exactly as wooden as the other parts of the original trilogy.

That said, I've read every bit of fiction he ever wrote and loved most of it, so...
> The argument that digital gold has no value outside of speculation usually comes from people in rich developed countries with a strong financial system

Some developing countries even have shitcoins as their official currency, like the Brazilian Real. So for us crypto comes almost naturally.
I was thinking about this conundrum a bit during my MFA when I met Wesley Stace and he mentioned something about there being a stigma against self-publishing literature that doesn't exist for self-releasing music. I think part of it is barrier to entry. Any schmuck with access to a computer with a word processor could write something that looks like a book and put it on Smashwords, etc. and claim to have published something.

For music, it gets a lot harder: There's a higher cost to being able to get an MP3 available on the music services, not just on the part of the middle men who will gladly take your money to put things up (it's been a while since I've been in the music game so I don't know how big a role these folks play nowadays), but also just for the act of recording which requires the non-trivial purchase or rental of recording equipment, not to mention the training to be able to produce something that's not embarrassing (although the latter has not stopped more than a few people from releasing stuff like that anyway). Most people think they could write a book ("if they only had the time") but few people think they could record a song.

But regardless, there's still the challenge of getting music heard, and I suspect that from minimum 500-CD orders of indie albums from the CD era, the majority are sitting in boxes in people's basements, garages and attics.
>The labor market without a decent social security net (aka unemployment insurance that actually works and is accessible, or outright UBI) is not a free market by definition!

That safety net is called your savings account. I could live off my savings alone for years before I find another job.
Video Games Satisfy Basic Human Needs (2017)
That's not an accurate comparison. Risk is risk of course, the rental market could crash but what I find weird is the government stepping in like this.

Imagine you wanted to sell your Facebook stock once it starts crashing (to buy another stock that maybe performs better) but the government says no you can't because Facebook employees will be affected so not only are you obligated to hold the stock, but you'll also need to pay out of pocket to keep it.

Just to be clear, I have no sympathy for the slumlords and rental corporations, I'm talking about regular folks that chose the rental market as more risk-adverse investors and maybe put all their savings into a single property that they fixed up and are maintaining themselves.
https://en.wikipedia.org/wiki/Tech_N9ne

According to wikipedia, Tech N9ne has been on many labels before, including majors such as Warner Bros. What is your exemple supposed to demonstrate? At some point, during his career, this artist benefited from being on a major label.
This can change dramatically based on the environment too. I have trouble with being dishonest, and prefer a straightforward style when giving and receiving both praise and critical feedback. I started my career at Google, where this worked fine. But when I worked at a startup full of people insecure about their ability to be an engineer, it was a terrible culture fit and I had to adapt heavily (at the cost of productivity: it took me five whole minutes of conversation once to figure out that the guy I was talking to wasn't failing to understand the problem with his code, he just disliked the fact that I referred to it as a bug)

I went back to working at a company full of in-demand folks who were secure in their ability, and my style immediately works smoothly again.
Sigh… It’s interesting that they blame the ML models, on the one hand it seems like a perfect example of ML gone wrong, on the other hand losses at this scale (hundreds of millions) don’t just signal that some data scientist’s model was not accurate enough… who’s running the ship over there? The ML model?

Also I’m really curious about the geographic distribution of their inventory… let’s do some Data Science on this blow up!
I just looked this up to check and you are kinda right, It is a separate chip but it sits under the same heat spreader and on the same little pcb platform so I guess on some level they are separate but once they get joined they essentially form one part for most practical purposes.

https://www.macrumors.com/2021/04/06/m1-mac-ram-and-ssd-upgr...
Come on, I already talked about that moving the goalposts things. Ruby is mostly used for monolithic web developement, and then scripts. This is covered by bigger ecosystems.
And to think, Zillow has so much data that we don't have access to. And they still failed to buy the most profitable properties.
How about you just... cut out the middleman and write an expect script (or pexpect script, for you Python programmers) ???