skysight-inc/HackerNews huggingface dataset:
> a la pnpm's approach for JS: https://pnpm.io/

Ah JS, how many days has it been since the last weekly "compromised npm package infecting everything" problem? If you are upholding that as gold standard you have to be the worlds laziest black hat.

> Disk is plentiful,

I recently had to install a chrome snap because it is the new IE6 and everyone is all over chrome exclusive APIs as if they were the new ActiveX. Over a gigabyte of dependencies for one application and given the trend of browser based desktop applications? I would like to have space left for my data after installing the programs I need for work.
The background color on that site makes it very painful to read. Author, if you're on HN, please make this something more normal.
> pair their phone with their car

Please don't. Just like with the rest of "smart" and "IoT", "just don't" is the correct answer in terms of privacy, security, and other basic human rights.

Just use a jack cable for audio "pairing" and an actual button for turning on/off lights, and a key for opening your door. It's as simple as this: really ecological, secure and user-friendly.
Lobste.rs is a lot more diverse than just sysadmin stuff. But I find lurking on there more sysadmin-related stuff is posted than I see on the frontpage here.
"this needs to degrade gracefully for PDFs and printed media."

It does not. I can't remember the last time I printed out a tutorial video. Just because this media describes itself as 'animated technical papers' does not mean it should behave like dead-tree or static pdf technical papers any more than 'motion pictures' should behave like tintypes.
Perhaps you could enlighten me as to why it isn't possible? I do understand that it would be difficult.
The author is actually talking about the opposite situation, where CS theory departments now have a lot more number theorists (and other mathematicians) dabbling in CS theory, which has lead to use of far more complex tools than before. (Fourier analysis of Boolean functions is one example I'm familiar with)
I believe this part was what that pertained to:

> tribal separatist movements in the regions of Scotland and Northern Ireland
> No killer use case

Yah this
I got introduced to pip and virtualenv when I started coding in python in 2013-14.
Except for the system/3rd party python and python2/python3 confusion a couple of times, I've been able to set up many projects at multiple companies that quite a few people have worked on over the years without any problem just using pip and virtualenv.
Somehow every time I searched about a better way of doing it, the new tools looked more confusing that the existing one. And since the existing ones keep working very well, I haven't had any incentive to move to any other tool that does even more magic under the wraps, in the name of making things simpler, because when the required conditions aren't met, these tools simply tend to give up.
So I just setup the virtualenv with the appropriate python version and then use pip to install python dependancies. Projects have varied from webservers to computer vision and forecasting. And have not faced any issue till date.
The content of lobste.rs is pretty good but I found the overall mentality pretty elitist to say the least. I spent a few weeks in their IRC channel but after a while I just left without an invite because I felt that it wasn’t really a group of people that I wanted to be a part of. This is obviously a subjective opinion but it’s not a feeling I often get when approaching online communities, so for me it was remarkable.
>Because I don't think package managers are ready for that, they usually like to have one version installed per package.

That's on them. Other language package managers can do it...
> It's not for you, though.

It is "not for me" though because of the reason I said: Too much boilerplate for common usage. If it had less it would be for "me" and everyone else too, just like the nameof() is.

So it is a niche tool exactly because of the implementation. I bet a lot of people expected nameof() to be niche too, but it isn't.
Or are healthy, well-adjusted men just more likely to end up married?
> Authors in the 1632 series have a very optimistic view of capitalism.

Really? The series leans heavily pro-union, for example.
Question is are the other languages saying the same thing about the distros? Or is this just a python thing
Do you maybe have links?

I personally know about making dirt bricks (pressing the earth) and about clay-hay mixes (traditional approach), but i have no clue about 3D-printing earths and what the benefits (or downsides) of that would be.
> responding negatively or belittling people who ask questions instead of just answering it. I haven't described it well but I'm sure you know what I'm talking about.

I have seen worse. People who ask questions and you can clearly deduce from the way they ask and describe the problem that they lack understanding of a piece of the puzzle.

Then snarkyadmin answers exactly to the question, with snarks and - in my opinion - waste the poster's time by not mentioning how the piece really works.

There's also a poster who doesn't know there is an additional piece of the puzzle they are not aware of and snarkyadmin answers like poster knows it and then feints surprises and blame poster for wasting everyone's time by not crafting a good enough question.

Saw it this week-end when a poster asked how to configure let's encrypt certificate on his vps and snarkyadmin explained poster should rename his vps hostname and dance with cname and ip when clearly the setup the poster had didn't need that to configure his lets encrypt renewal. But snarkyadmin was kind enough to point to SNI documentation. For a single domain.

On that note, that's one of the reasons I only google IT problems in English. Can't stand the french anymore.
Ask HN: Seeking Advice on Educational Robots
I have been given a modest budget to revamp the robotics class at the college where I teach, and I'm having trouble finding good options for robots to buy for students to work with in the classroom.

Ideally I'm looking for small wheeled robots with a grasping arm attached. It would have a built in camera and enough compute on board to do some basic computer vision, so maybe Raspberry Pi based.

To be honest the students that I work with are not strong at programming, but they do have some experience with Matlab and Simulink from previous classes. I'm hesitant to bring ROS into the picture based on previous frustrating experience (though that was nearly 10 years ago, maybe it is better now).

Last year we did a pilot class based on the cheapest robotics kits on Amazon (Adeept brand arms, built from small hobby servos and acrylic plates). The students enjoyed working with them, but the arms weren't rigid enough or strong enough for accurate and repeatable control, like drawing with a pen.

Industrial robots like the Franka Emika Panda are out of my budget. I've started to see some Chinese companies and kickstarters offering cheaper 6 degree of freedom "cobots," but I haven't found much info and worry about customer support. The "Locobot" system from Interbotix (like a roomba with an arm on top) is in the ballpark, but maybe larger than necessary.

Is there anything like the Adeept RaspTank Pro (http://www.adeept.com/rasptank-pro_p0245.html), but just a little bit more sturdy?

Are Amazon and RobotShop.com the only places to look for educational robots in the US? I would hate to make a big order and find out later that I missed out on a great option.
Not my intention at all.

To clarify, the law WAS awful, but when this was posted here on HN it was already announced that the only thing that PSD (opposing political party) was willing to approve was the use body-cams and wildfires surveillance, and that the CNPD had already deem it unconstitutional.

As it stands now (and it might change, obviously) it seems like none of the "backdoors" will make it to the final law.

So my argument is that this is a non-issue at the moment, but again, it might change because #politics.

And I can't find a source for this, but from what I remember this law was put forward after we had some security issues in the bar areas of Porto and Lisbon, and the police requested more video surveillance to fix it. I believe the Data Protection Commission didn't approved it, so now here we are.
Yes, don't do this:

https://github.com/rehacktive/caffeine/blob/master/database/...

"INSERT INTO %v (id, data) VALUES('%v','%v') ON CONFLICT (id) DO UPDATE SET data = '%v'"

Use prepared statements and parameters passed to the db driver, not building strings with strings or you are vulnerable to sqli.

I'd also avoid using %v anyway when building strings - safer to use a specific type like %d for int.
Practically all the actual work a PM does can be replaced with a script and dashboard

That is entirely true if you have an organised, disciplined dev team that communicates well.

Good luck with that.
I didn't consider "don't wait for someone else to get hacked and tell you about it" to be a particularly strict method of security, but sure, I guess so.
> If you care about portable GPU code, unfortunately, NVIDIA is the only vendor that actually delivers.

Absolutely false. First, GPU code is inherently unportable in terms of performance. Switch to another vendor's GPU, or to another microarchitecture, and you may need to rewrite your entire kernel.

But even other than that: NVIDIA promotes its own proprietary and mostly-closed-source ecosystem, named CUDA, and has actively hampered the adoption and development of OpenCL, which was supposed to be the open standard. Not that OpenCL was not "betrayed" by others, but still.

> They voted GPU support into the C++ 2017 and Fortran 2018 ISO standards

There is no GPU support in the C++ standard. If you mean something like `std::par` as an execution strategy for standard library algorithm, that's rather limited in scope and not really GPU-specific.

> While NVIDIA implemented this YEARS ago

Again not quite sure what you mean. Are you talking about how you can't write GPU kernels in C++17? Or about `std::par` implementations for the standard libraries?

> You can take your standard conforming C++ code _today_, not a single line of CUDA, OpenMP, OpenACC, etc. and the nvidia compiler compiles it and runs it on GPUs and multi-core CPUs.

This doesn't make sense, and it's also not true. On a GPU, you would not use a lot of the standard library to get things done; that would either be exceedingly slow or just not work. Also, some language features (like exceptions) don't work on GPUs, and for good reason; hence anything in the standard library which relies on exceptions for error handling also doesn't work as-is - which is perfectly ok.

> You can also take your normal Python NumPy code and run it on NVIDIA GPUs "as is" without changes.

This is the only part of what you've written which is mostly-true (and I haven't fully verified even this since I don't do Python work).
Really, it's the French administration's fondness for paperwork.

During the Covid lockdowns people were allowed to go out for a number of specific reasons, like in most countries. Of course the French administration decided that this required people to fill a specific form to select the reason, to sign the form (along with name, date and place of birth, address, date of time person left home), and to carry it with them in case police stopped them... After some time they did deploy an electronic version (on smartphones, but that's still a form) but it's the very idea of doing something like that that is symptomatic of the mindset.
I get you and mostly agree, but using GA on its gov.uk websites is probably the least intrusive surveillance the UK does. GCHQ were pretty heavily involved in those Snowden leaks, and I don’t imagine they’ve backed off at all since then.
It can be:

use Lingua::Romana::Perligata;

adnota Illud Cribrum Eratothenis

maximum tum val inquementum tum biguttam tum stadium egresso scribe.
da meo maximo vestibulo perlegementum.

maximum comementum tum novumversum egresso scribe.
meis listis conscribementa II tum maximum da.
dum damentum nexto listis decapitamentum fac
sic
lista sic hoc tum nextum recidementum cis vannementa listis da.
dictum sic deinde cis tum biguttam tum stadium tum cum nextum
comementum tum novumversum scribe egresso.
cis

Source: https://metacpan.org/dist/Lingua-Romana-Perligata/view/lib/L...
I'm the author if anyone has questions. :)
Even if the history is exactly the same, GitHub only tracks forks made through the fork button. A true git fork (eg anonymous clone, push to brand new repo, preserving all commit history) is not tracked.
The right mind needs to come up with the right use case application. After that... Boom!
cheers for https://www.di.fm/

I use the 'chillout' station via di.fm for most of my work.. good beats, 96% no words for hours usually.
It'll sometimes throw a tune that annoys and I'll click over to the 'melodic progressive' (99% no words and a bit more upbeat usually) channel for a bit.

I pay for commercial free and get access to the other site with all the mainstream genres as well.

Nice in that can switch to 'trance', vocal trance, or similar upbeat station for cleaning / cooking and others for total chill like ambient when needed.

Enjoy it via the desktop computer and phone app.

Nice that it uses way less bandwidth than youtube, loved them since they were 'digitally imported' - now wondering if it's them I used few times with winamp way back in the day.

Still great and used almost every day. This may be my most value per dollar purchase every year.
This seems like it could be a great platform to flesh out the collaborative Svelte REPL I’ve been working on. It’s using CRDTs over websockets with YJS driving Monaco, and I’ve been fiddling with different ways to keep track of rooms and users while keeping it serverless on the JAMStack. I’ve got Supabase handling auth and data storage, but this could be great glue for the final pieces if I’m understanding DO correctly, and even replace a lot of the need for Postgres outside of Auth.
Don't put the system python in $PATH. Any command that needs the system python can be launched through a shim/wrapper script that sets the PATH. (Or even better to execute python directly to avoid passing the system python in PATH.)
Print is totally optimized for ads, and has been since way before computers were invented.

The ads just work in a different way (and arguably interfere with the reading less.)
There you go strawmanning again.

The claim wasn’t "BitCoin is for illegal things (and by comparison, USD is never used for crime)", it was "BitCoin's lack of support for KYC makes it more likely to be attractive to criminals and therefore likely to have its use criminalized" which you CAN'T just hand waive away.
> I live in one of those cultures today and I’d emphasize the “tolerated” part. Not that dissimilar to physically hitting your spouse.

It has absolutely nothing in common with hitting your spouse. It is extremely frowned upon to openly display it but relatively accepted if it's discreet. It's very correlated to the relation a population has to sex. People in very religious countries where sex is seen as moraly dubious have very strong view against infidelity and people in countries with a more casual view of sex don't think it's such a big deal.

France is a relatively extreme example. The last Pew Research Center study shows that only 47% of the French thinks that infidelity is moraly unacceptable and there is no large gap between women and men answers.
Yes it would be fine. The issue would arise if you connect to a remote service which then instructs your browser to run local queries.
How humble would you be if you lost $650M?
> Are distros doing anything more than scanning CVE databases with the library versions, or are they _actually_ auditing the versions they choose?

Debian Developer here. Part of packaging work, for Python libraries or anything else, is to verify the reliability of the upstream developers, audit the code, set hardening flags, add sandboxing and so on.

I spotted and reported vulnerability myself and it's not uncommon.
> If, instead of a big inscrutable blob of HTML/JS/CSS, Amazon gave me the same shaped data for a product listing as Ebay does, then as a user I would have a lot more power over how my browser represents any generic product listing

That would certainly be ideal, but uniformity is not a prerequisite for more powerful, user-serving interfaces.

It doesn't always take special intent on the part of the site operator to end up providing a rich source of data; many sites end up doing it by accident. This is what's so great about HTML's class attribute. People often mistakenly think of classes as inherently having something to do with CSS. CSS is a carrot that often results in developers being encouraged to mark things up whether they buy in to the semantic argument or not[1].

Take a look at the video listings on pbs.org for an example of rich structure that can be readily mined by the UA. What's lacking is a generic tool that sits at about the same place as Excel on the power/expression spectrum and which allows the user to create and "train" an adapter (in a matter of seconds) for an arbitrary Web property. For example, given a list of videos and associated details (title, thumbnail, description, length, etc), point to two or more titles and your UA can, in an ML-free way, use those samples to examine the structure to create an adapter. To really make things tighten it up to an acceptable margin, it can even provide an editor that exposes the raw class names as UI so you can explicitly reconfigure the model as you please. This is a system that would not take an expert to use, at least not any more than the "expertise" that is required to recognize that, say, the table widgets in many apps allow you to sort data or rearrange/resize columns via drag and drop.

1. It's not perfect, because you have garbage-out fads that can come along and knee you in the stomach, like Tailwind CSS and compilers that generate meaningless class names, but there are short-term and long-term mitigations.
you want hotspot/wifi filesharing standard with the OS? would be useful indeed but I'm not surprised we don't have that.

maybe running python -m http.server in Termux is more attractive.
>It is not the first time the public in the ethnically divided country, which is plagued by tribal separatist movements in the regions of Scotland and Northern Ireland

What's unclear? Yesteryear's elites drew lines on maps dividing or trapping people who don't look or think like them, and today's elites, sitting in distant enclaves, expect economic productivity and quiet passivity from their thralls. Now those people want self-determination!

Am I talking about Kurds or the Scottish?
The problem with all of these HN for "X" solutions is that HN has lots of stuff in it that is not focused on webdev, startups, and programming and often that stuff is among the most popular.

But of technical issues webdev, startups, and programming do have a bonus it seems.

So if I were going to make an HN for sysadmins I would just make something that took everything from HN but if it were detected that it was of especial interest to Sysadmins it had a bonus time on the front page or perhaps a default +2 points when posted - how to detect? Perhaps see if the link is being discussed in any of the more sysadmin focused sites already mentioned here?
In my experience, Caltrain in Silicon Valley smells of urine. So it's not just a third world thing.
Please ignore all the comments where people are hung up on the 'technical papers' bit. This is great and you should be proud of what you've made. It is under no obligation to fulfill the expectations of a previous generation of media for one specific use case. I think a lot of people resort to slide decks to accomplish what you've built and IMO this is better.
You guys have errors in your programs? :)

Jokes aside… chaos engineering is a big deal right now - this isn’t a terrible idea and might be worthy of a fork.
> Then it became a series of increasingly complex steps

honestly, what series of increasingly complex steps? The main thing today is an expectation of HTTPS, and that is added complexity, but also something you can auto-deploy today and lots of tutorials available. E.g. I'm fairly sure I've spent more time of my life on .htaccess and nginx redirect syntax than on HTTPS, despite starting early with Let's Encrypt and not choosing the most-automated solutions - and in other setups "add HTTPS to a domain" is literally a line of config file, with the webserver doing the rest. But that's beside the point I made:

This is assuming that you actually are deploying something to a server, instead of making use of the myriad of ways of having that be someone else's problem. How are those "essentially" not true options?

"We can trust users and random developers to do the right thing" is understandably not the security position browsers take, so this needs some solution eventually. What the right tradeoff is is a good question. (i.e. IMHO there should be clear ways for devices to opt-in to being accessed)
Not if they pull in all of their dependencies, PyQt would have a complete copy of all Qt binaries and a complete chrome install because of course Qt includes a browser based html viewer. Python packages are gigabytes.
Until Git garbage collects, it's all still there (mostly). Sure there are some extraordinarily destructive things like `rm .git/` that you could do, but even if you point a new repo at remote it might not accept the merge (push).
Just call it an electric heater.
It's not just you!

It's not a coincindence that the most solid friendships are formed in high school/college where there is a "forced" continous presence .

And also you have the added bonus of some authority to rally against and thus bond together (think a teacher, some egomaniac professor, the principal...)

In adulthood all those factors go out of the window + everybody is extremely concerned about being cool and not being needy.

I don't think this can be solved except moving to countries which are socially warm such as Brazil, Mexico, Nigeria etc.

With warmth also comes strong sentiments and envy, but it's better than the social flatline observed domestically.

The countries that I mentioned are exceptional in terms of social warmth because of cultural (perhaps climatic?) factors.

As a rule of thumb the poorer a country is and the shortest the expected lifespan, the more social interaction happens between its citizens. In a sense , rational thought and order are the mortal enemies of social interaction.

Going back to the the topic of school/college....America is the Ivy league college where everybody is keeping the score of their social status and nobody talks to anybody else.

Places in the 3rd world are like party schools, nobody gives a damn about tomorrow, they are all there to get shitfaced and enjoy the moment, being in the moment and mingle around, get involved in orgies and fights...sometimes orgies turning into fights and viceversa.
Best answer so far. There is absolutely 0 legitimate reason (that i can think of anyway) a website should be making requests from your browser to another website without explicit user consent/interaction.

Hyperlinks are great, but random javascript crap making request on our behalf is just harming us users.
... yes, that's what you already said?
Final Report -IG-22-003-

NASA's management of the Artemis missions

NASA Office of Inspector General

Office of Audits

November 15, 2021

https://oig.nasa.gov/docs/IG-22-003.pdf
Against ethics and evidence, public officials push vaccine mandates for kids
I'll be positive. I like Firefox so much that i actively avoid it. I still need to keep it because some sites do not support other browsers.
The frontier isn't always hard. When someone discovers a new powerful technique, there's often a wave of people just applying it to everything, and seeing what sticks.

See https://slatestarcodex.com/2016/11/17/the-alzheimer-photo/