skysight-inc/HackerNews huggingface dataset:
Is most of their added value in the client app? I certainly doubt it. The app is probably a front-end that queries various API endpoints.

Who could use the source code? Their competitors? Maybe, but there isn't that much competition in that space, and actually developing the app is certainly not the most difficult part. Auditing it probably is, and using a competitor's open source app as a base is probably a no-go for a lot of established players. For what purpose would they copy a functioning app?

One thing I can see as an argument against would be raising the bar for would-be copycats and phishing attempts. Not that it raises it too much either.

Or is it to limit documentation of their API? I know security trough obscurity is thought as a good additional measure in traditional banking, but that doesn't seem to be the case here. And reverse-engineering an app wouldn't be that complicated.

I would actually love an open source, cross-bank app. Not sure why it couldn't happen. I'm not sure either what the value proposition is for banks to try and limit that kind of development. Control the user's interactions with the bank as much as possible?

It's like these banking apps requiring "safetynet" or similar: they trust google or the manufacturer more than myself, while I am the actual client!
Lennart Poettering created systemd, which is a rewrite of many different things in linux that where seperate before. Some people don‘t like it.
> An average project would depend only on a few impure packages, such as a HTTP client or a framework, therefore it would be much easier to verify the security (for small impure packages you could just inspect their code yourself, and bigger packages like frameworks would have many contributors that check the code and strict policies about their security).

OK so just a random list of common packages a web app could use that come to mind :

- HTTP server

- HTTP client

- Logging

- Database

- Distributed cache

- File storage/blob storage

- Email

- Push notifications/SMS if dealing with mobile

- Auth (eg. OAuth/OpenID Connect middleware)

- Background task management/queue

And then there's libraries that wrap access to external services, specific protocol libraries like gRPC or GraphQL.

I would say the number of pure libraries that you reference directly in a modern webapp is probably very low, that's all a layer below.
> do no harm. Beyond that, there is room for tolerance and disagreement.

This is just a nice-sounding platitude. What is or isn't harmful is not written in stone. On the contrary, is a hugely polarizing topic that informs the legal system. People get to live or die because of views and opinions.
These days it's more and more the lack of online collaborative tools that is a problem.
It's akin to post-purchase rationalization and sunk cost bias rolled into one - likewise I think it's a specific bias in its own right, but a search hasn't turned up anything yet!
Had similar experience recently and it had made all the way to be the top Google news hit - apparently the site is cranking out ”news” as SEO spam to promote their app.

https://mobile.twitter.com/moo9000/status/145873329934659174...
Python Pyenv Shims Not in Path Fix
>Is creating a google account more arduous than before?

Not sure about in the EU, but here in the US I cannot create a google account without providing a telephone number "for security."

That's certainly different (not more arduous, but more privacy invading) from when I created other Google accounts some years back.
I think this is dependent on the people. I’ve also seen many couples who couldn’t have kids that have very fulfilling lives. They volunteer, are active in and well liked by the community. I think meaning can come from many places. Kids are an almost guaranteed source but you can find meaning without children if you look for it.

This might just be wishful thinking on my part since I’m unable to have kids, but I’d like to think I’m not destined for a lonely meaningless future.
The default is to declare ranges, but then you get a lockfile after an initial build, and Cargo will use those exact versions until you ask for changes.
.NET 6 and Self-Contained Single File Apps
*aka cancer / high burden to switch systems to [insert any turing-complete language]
Imo they shouldn't count anyways.
>Know that phenomenon where users that paid for software are typically more satisfied with it and give better ratings than users who didn't?

>Whish I knew what the proper name for it is,

Possibly these:

https://en.wikipedia.org/wiki/Mere_ownership_effect

https://en.wikipedia.org/wiki/Endowment_effect

https://en.wikipedia.org/wiki/Choice-supportive_bias

https://en.wikipedia.org/wiki/IKEA_effect
Are there any projects to actually try to evolve the web to avoid censorship / intermediation?

It seems to me we are good at identifying the negative trend but aren't actually acting on them. Or am I just missing the obvious?
Don't much care for any company that has "Open" in their name when their entire business model seems to be buying and consolidating other businesses under one umbrella.
Ditto raises $9M to connect devices peer-to-peer
Nona – A German Search Engine
How to Not COP It – Summary and Eco Living Tips
That's all risk and no gain. If you're successful you've saved no money and just moved platforms. If the community thinks FOSS is an end in and of itself you've accomplished something but only if the community thinks so.
> Sometimes I also wonder why Org Mode is not as popular as Markdown, the former is far more powerful.

The reliance on Emacs has been mentioned by a fair number of commenters already, but there's also another issue here, I think -- there are a lot of Markdown variants, and while that's usually described as a flaw rather than a feature, the silver lining is that there probably is a Markdown processor that can handle [thing that you want], from citations to cross-references to math formulas. "But then I'm tied to that variant of Markdown" is a valid objection, but it's not one that's really answered by Org Mode.

In practice, some Markdown syntax that started as "non-standard extensions" -- most notably tables and footnotes -- has been widely adopted by most processors. Several processors I know of do have ways to attach labels or other metadata to sections, such as MultiMarkdown's cross-references.

> I usually further break down a TODO into several sub-TODOs and write something under each one to organize my thoughts, including code blocks, tables, quotes, footnotes, which is impossible in Markdown.

This one I'm not actually sure I'm following. You can certainly insert code blocks, tables, quotes, and footnotes under subheadings and even under indented lists.

Org Mode is absolutely better as a task manager and day planner -- but that's not a function of Org Mode's markup syntax, except to the degree the syntax has specific features for supporting tasks and agendas. It's a function of Org Mode being, well, a mode, with a lot of specific functionality in Emacs. For general purpose document markup, it's probably as good as (e.g.) MultiMarkdown, but not better; if you're comfortable with one, there'd be little obvious reason to switch to the other.
Product Hunt Is Doomed
Luck and hard work aren't exclusive attributes for success.
> This take makes it sound like people who tweet or have a blog are narcissistic or something.

Only if you make the value judgement that having hobbies that are centered around one's self is intrinsically narcissistic and therefore bad. If you think of "self-centered" simply as "centered around one's self," then there's no doubt that writing in a place that people visit with the specific aim of reading your writing is more "self-centered" and writing in a place where people visit to participate in a wider community, and are thereby exposed to your writing, is less so.

I don't even understand the claim that asserting that your writing could be interesting to a wider community is more "self-centered" than not asserting that your writing could be interesting to a wider community, and therefore should be in a place all to itself where people would only visit if they were specifically interested in you.

I think the words for the feeling you're describing are "self-important" or "egotistical." Let's instead assume that neither choice is a moral failure.
Modifying HTTP response headers with Transform Rules
I feel like "single shared namespace" works best when the ecosystem is managed collaboratively, with a clear leadership to make calls on who gets what name— for example, something like a Linux distro, where there are Replaces/Provides metadata specifically to facilitate these kinds of transitions and avoid being stuck forever with crappy legacy nonsense.

But this doesn't work at all in a free-for-all environment like PyPI, NPM, or Crates, where anyone can just grab a name and then have it in perpetuity.

IMO the Docker ecosystem got this right, with baking in a domain name as part of the container, and insisting that everyone on docker.io use a vendor/product convention. This meant that the toplevel namespace was reserved for them to offer (or delegate the offering of) specific blessed container images, much more in line with how distro packaging might work.

# Get the "official" image, whatever that means (but you trust Docker Inc, so yay).
docker pull nginx

# Get an image supplied by a specific vendor.
docker pull bitnami/nginx

# Get an image from a different server altogether; maybe it's your company, or you don't trust Docker Inc after all?
docker pull quay.io/jitesoft/nginx

Maybe the big-flat-namespace thing is still a years-later reaction against huge and unnecessary hierarchies in Java land? I think the ideal is not to permit infinite depth, but perhaps to insist on 2-3 levels.
That's a lot of text, but I fail to see your point. Is there one?

In keeping with the spirit of the author; freedom is not a goal, but a direction. And broadly speaking, we're moving in the right direction.

Unfortunately, you sound like you've become somewhat of a zealot. A byproduct of being spoon fed rage via the nightly media /twitter cycle.

Statistically there's one specific group of peoples that drive a disproportionate amount of violent crime. Specifically murder, rape, robbery, and assault.

Raw data is here: https://ucr.fbi.gov/crime-in-the-u.s/2019/crime-in-the-u.s.-...

I think stepping back and realizing how far we've come, not only as a country but also globally is worth recognizing. Harboring venom from past wrongs won't do you any good; if anything it appears to be obfuscating the present.
Newspapers are awful. I had one thrown in my yard DAILY, that the previous homeowner had signed up for. I couldn't figure out what the publication even was, or how to contact them. I ended up flagging down the delivery guy (4am), he doesn't know who the publisher is and so I just tell him to stop throwing in my yard (put in trash for all I care). It worked for a while, but probably the turnover happened and the next delivery guy started throwing in my yard again. So I wake up, flag him down, and ask for his bosses info. Call them, they're confrontational about it so I basically went on to say I feel they are littering on my property and I will report them to police if it keeps happening (yep, Karen move). That led to them telling me who the publisher was, they had a corporate holding company website, with an image of text instructing how to cancel (not SEO friendly). I had to call. After calling, I had to write a letter to some PO Box. It was insane.

Meanwhile, I signed up for a magazine 20 years ago for $8/year and still get it monthly as well. I haven't paid since, they send me an annual reminder pay which I ignore. I suppose they like including me in their readership numbers to sell print ads, so they keep sending me magazines. Luckily, I enjoy the magazine. Monthly in my mailbox (not wet out in my yard). I would not want to even think about trying to stop the deliveries, they follow me wherever I live.
Working 1099 should be preferable from a tax perspective (if through an s corp) and from a liquidity standpoint (money is cash, not 401k contorbutions), not worse, I would think.

You do have to pay health insurance monthly but for a young single person I'm at 250 a month so nothing that really changes things.
What percentage of websites is it possible to determine the language? My guess is not many. Your metric self-selects for recognizing PHP sites because of Wordpress.
Love this kind of build, so I'm working on a little breadboard one myself https://www.youtube.com/IanWard1 similar to the Ben Eater 8-bit CPU videos https://www.youtube.com/watch?v=HyznrdDSSGM&list=PLowKtXNTBy... (which are amazing and everyone should watch)
So…high income, low expenses, invest smart.

Got it.
>Youtube does not age restrict many videos, it's seriously hard finding one that's neither gore nor porn and still age restricted.

I was going to post a link to a song based on the "All your base are belong to us" meme on another site, but it was, for some unknown reason, age-restricted.
This gives me RSI
I really wish competing Three.js based framework A-Frame would get ESM, so we can start having a wonderful modern similar experience there. Alas[1].

[1] https://github.com/aframevr/aframe/issues/3732
How do you secure physical access? Tamper evident bags and stuff are nice, but they'll only allow you to discover a breach after the fact, potentially days/weeks after the damage is done (said damage can be sneaky and just use the keys to extract sensitive data or introduce further malicious software into the infrastructure, which may remain there even after the keys themselves are rotated).

Totally understandable if you can't/don't want to answer obviously.
i have the impression the max contracting rate is 175/hr. when you ask for more, “HR says they never seen such high rates”… that doesn’t leave you with much in california. and i think that once you move to a cheaper place you cannot demand that rate. so how can you increase your rate as a software engineering contractor?
my 2c: if you have the time and energy, the money is good and the company enviroment is healthy: keep your job, it *IS* important to know to fundamentals.
But open a github/gitlab/gitee/gitwhatever portfolio and start some showcase-projects on these trendier frameworks ( i'm a svelte fan, btw ) to keep you coding muscles warm. And remember to link this portfolio on your linkedin page; this way you can have the cake and eat it.
Even if not, creating more accounts increases your exposure to Google's faulty moderation infrastructure, multiplying the probability that all of your accounts get banned. Probably nonlinearly, since more accounts under same address makes you look more like a bot.
Yeah, everybody focuses on Word but that's the least interesting one. It's all about Excel and there is no competitor that has hundreds of thousands of trained users and works so well that it is the standard itself.

Luckily I don't use Excel and therefore can rarely use Microsoft.
> So often we have to deal with people saying the most horrific things under the guise of "I'm just asking questions"

It's true. "I'm just asking questions" is definitely a routine used to harass trans people. It's probably the most common routine now that overt transphobia is less socially acceptable. I doubt there's a single trans person in the US -- outside of very cloistered bubbles -- who hasn't been harassed by a troll who was pretending to "jut ask questions".

My MIL is one of those people -- she's even gone through the same line of questions on the same exact person (1+ year apart, forgot she already met the person). Which is why she's no longer welcome in polite company. The point: I'm not saying that removing people from some social contexts is never the answer. Sometimes that's the best course of action.

But here's the thing. "Just Asking Questions" trolling is a particularly insidious and ingenious routine. Sure, it's mean and petty with plausible deniability. But that's not why it's so genius. Using this routine en masse is a genius move by anti-trans hate groups because it actively shuts down education, which is ultimately the best way we know to increase public acceptance of transgender people.

We can't do anything about recalcitrant assholes except cut them out of some parts of our lives. But we can disallow them the pleasure of shutting down education and thereby reinforcing their own ignorance in the broader population.

Anyways, that's a long-winded way of saying "kill them with kindness". If they were genuinely curious then your kindness just won trans people an ally. If they were trolling then the only way to cut past the plausible deniability bullshit is to avoid direct anger and beat them at their own "pastor's wife bless-your-heart" game. And anyways, there's something viscerally pleasing about a midwesterner who didn't know you're a midwest transplant slowing realize they're being out-midwested... much more pleasing than having to deal with an asshole accusing you of being mean to them when they were "just asking questions" ;-)

But the main point is, it doesn't matter if they're trolling or genuine! In both cases, responding with direct anger to questions in the moment is a losing strategy. The troll gets to play victim and the genuinely uneducated are put on the defensive.

(And, yes, it's unreasonable that trans people are so often de facto representatives of all trans people in every daily interaction. I'm just describing the micro-political strategy and not trying to imply there's anything wrong with being a normal human instead of a political operative.)
It's like a certificate of authenticity. If you buy a nice watch which comes with a piece of paper saying that Rolex made it, what's actually worth money here? The watch is worth the money, provided you can prove that it was made by Rolex and not a knockoff. Is the certificate of authenticity itself worth money? Ehh... sort of... but only if you have the watch its authenticating. Who would buy the piece of paper alone?

What about if i can make infinite identical copies of the watch? Things stop making sense once there is no scarcity.
> Using the Cangjie input method, I found those keystrokes build and translate to Question 1 [甠題1火].

It doesn't. Cangjie doesn't use a numeric digit in its encoding, so it should be interpreted as x + 4 + ivygA + 51 + F if it has any remote chance to be Cangjie but the first two of them would be invalid. It is neither Zhuyin because 4 signifies a tone mark which goes after a syllable but x alone gives you a single consonant (ㄌ for l) so it can't be a full syllable.
If you don't moderate content, everything turns into 4chan. And for those two want that, 4chan already exists.
Microsoft Announces General Availability of SynapseML
I am mystified that we are having this conversation. To me the central statement in my original posting was:

> For validity, RCTs depend utterly on reliable sortative diagnoses

So, are you saying you believe an RCT can demonstrate a fact when whichever medication is being tested addresses the actual condition of only a tiny fraction of the participants, and even exacerbates some of the others' various conditions?

Such trials are not idiotic, except as a waste of money. Reporting their results as if meaningful is what I called idiotic.

Or, are you saying you know how to design the protocol for an RCT when you have no idea which, if any, of the participants actually suffer the condition your medication is supposed to treat?
> In any case, hero-worship of scientists is very silly.

Compared to, say, people who use sticks to roll balls into holes? [https://www.theonion.com/man-who-used-stick-to-roll-ball-int...] I'll take scientist worship any day compared to all the other idiots and charlatans our culture chooses to worship.
Parent only claimed that most Haskell packages are pure and thus cannot execute impure side-effects. They didn't say anything about the overall number of dependencies.
> Take a $ 500-1000 / day, full-remote job

How common is this as contractor pay outside the US? I'd find it hard to hit the lower end of that (i.e. 440 eur per day) in fully-remote jobs, despite the pandemic making remote jobs more common.

For context, I'm a Python dev, in finance. I used to do Java, which I note still seems to offer higher salaries, but I wouldn't be tempted to return. Maybe the AWS route could work?
TL;DR: Be a parasite and use the economic opportunity others create.

Works well if only a few of us do it. But someone needs to start and run the companies where you get those contracts. Or?
Another approach would be to harden the software supply chain by requiring that dependencies and side-effects are entitlements in metadata that are visible and would need to be approved by the programmer that imports the module.

There are already some frameworks out there who use signed metadata and databases to track code and where code comes from.
But on the source code level, I think the metadata could just be extracted from the existing Crate metadata and source code.
> But contractor income is not comparable to normal career income because you have to handle additional taxes and health insurance, so this is more like a $150K (plus or minus) full time job once you subtract self-employment taxes and pay for health insurance.

What ? I've never heard of a scenario where you get less money after tax as a contractor vs employee, even without doing things like claiming a bunch of everyday expenses on your business (like a car, home office rent, equipment, etc.)
Yeah, I'd say that Haskell has done a phenomenal job for most of its history of maintaining a balance between the interests of researchers, commercial programmers, educators, and enthusiasts/hobbyists. At different times, each of these communities has been inconvenienced by decisions made by the Haskell community, but the community has nevertheless been for the most part welcoming to all of them. On the other hand, some of the darkest chapters of the community have involved power plays where one of these groups feels entitled to sideline the others and decides it should be in charge.

By contrast, a typical mainstream programming language might, say, completely neglect one or more of these communities in favor of whatever is best for commercial programmers. Particularly when, like most mainstream languages, it's mainly funded by those interests.
Monzo engineer here. 99.99% of changes don't require key ceremonies. When they do, we can usually book them with a few days notice. It's normally for things like onboarding big new systems and gets planned into a project from the beginning.

The people who implemented this process are the same type of "IT/devs" or "Devops" you mention. There isn't a whole lot of throwing things over the wall to Ops, or for that matter putting up arduous processes against "normal" engineers.
Thanks very much for the response and the writeup, really appreciate it!
I guess this article isn't for me, since I have no problem with working hard. I enjoy it, and derive meaning from doing good work.

In "Man's Search for Meaning", Viktor Frankl identifies three areas of focus to find meaning in life: doing good work, loving someone unconditionally, and the experience of suffering.

I've never had any trauma remotely like living through the holocaust, so I can't really related to Frankl's journey, but those three things have always have resonated with me as source of true meaning in life. When I meet other people who really seem to be profoundly happy with their life journey, they always have derived that from: doing great work, loving someone deeply, or experiencing true suffering.