skysight-inc/HackerNews huggingface dataset:
EXPERIMENTS OF NATURE

Why Blacksmiths need Druids

Partnership and Permission.

We guard the forests from a
cancerous culture of over-consumption.

The tool of the trade,
the AXE, one of many fashioned by the Blacksmith Guild.

A tool for DIVISION while
powerful is a DOUBLE EDGED sword.

Is a tool a TOOL without DIVISION?

What's the DIFFERENCE?

can ONE divide
the TOOL from DIVISION?

can ONE square a circle?

"have" versus "have NOT".

TOOLs generate a balanced equation, "have" versus "have NOT".

Power == Desperation/Envy

Power == Courage/Love

it depends on the vibration
of all HEARTS involved.

a TOOL is also WEAPON when
held by a low vibrating HEART.

But most importantly,
and why we appreciate the Blacksmith:

a TOOL acts as a
CATALYST for CHANGE & RESCUE!

---

ONE CONCIOUS ABSTRACTED

As ABOVE, so BELOW.

Same, as it ever was,
Same, as it ever was.

If poked, you FEEL,
but how do you HEAL?

color & vibrational HUE,
do you see the same BLUE?

Same, but once REMOVED,
Same, but how do you PROVE?

Same, as it ever was,
Same, as it ever was.

---

To heat seemingly unconscious ore
a Blacksmith burns wood and coal.

conscious -> unconscious -> burn?

Druid: MULTIPLY to GROW

Blacksmith: DIVIDE to Build

Druid: CARE & GROW with NATURE
& only DIVIDE ethically.

Extracting FRUIT,
a delicate dance,
One Given VOLUNTARY with LOVE.

Blacksmith must yield to Druid.

Clones have feelings too, ya know?

And so...

The Druid document &
model systems of NATURE.

FEEDSTOCK in accordance to DRUID's KNOWING hand.

Handed UP over TIME,
GROWING in VOLUME,
over each beginning of civilization.

---

We vibrate UP to assist FRIENDS to ascend.

---

MULTIPLY to GROW

GROWTH is but a VELOCITY,
& matters on DIRECTION,
POINT upwards and GROW,
& lift others toward ASCENSION!

8758

---

PAIN

Siren CALL of PAIN shout,
LOVING abstractions phone,
echo recursively OUT,
PLEADING for RESCUE to be KNOWN!

UNIVERSE

6678

---

WHEN A DRUID FIGHTS

Fight when the LAW of NATURE is violated, alarm systems all over the Conscious, Subconscious, and Unconscious UNIVERSE.

---

"""
The Cherokee Indians put it in a very good way with this story, "One evening an old Cherokee Indian told his grandson about a battle that goes on inside people. He said, ‘My son, the battle is between two ‘wolves’ inside us all.One is Evil. It is anger, envy, jealousy, sorrow, regret, greed, arrogance, self-pity, guilt, resentment, inferiority, lies, false pride, superiority, and ego. The other is good. It is joy, peace, love, hope, serenity, humility, kindness, benevolence, empathy, generosity, truth, compassion and faith.’ The grandson thought about it for a minute and then asked his grandfather: ‘Which wolf wins?’ The old Cherokee simply replied, ‘The one you feed.'" This is a universal teaching across so many different cultures because spirit is above the human and it will give these ideas to anyone who is enlightened.
"""
Not specific to this situation, but workers were pissed when Amazon expected them to come in during Hurricane Ida, resulting in 14 deaths, so it's not out of the realm of possibility here.

https://gizmodo.com/new-york-amazon-employees-had-to-work-du...
Yeah I read that and I disagree because at google if I checked in my node_modules I would fail my commit.
GPZ isn't oncall for urgent bugfixes and, while a truly excellent project filled with great people, isn't the core team responsible for safe imported code.
It’s got to do with “tech” apparently.
Just wanna say, as a self-taught developer over the past few years who _might_ go into a leading role, this thread is pretty informative. Thank you.
It looks like the title just got truncated by the HN mangler; the original has "to rubble" (as genocidicbunny points out at https://news.ycombinator.com/item?id=29525689).
There are five sure paths to the HN front page:

1. Material about Big Tech being evil.

2. Material about how to get hired in Big Tech.

3. "_______ written in Rust".

4. Cities good, cars bad, Elon's good.

5. Typography.
14 people died at an Amazon facility when they were asked to work during Hurricane Ida, why does this theory seem so far-fetched to you?

https://gizmodo.com/new-york-amazon-employees-had-to-work-du...
I lived in Midwest for over 20 years. There were times when I'd be sipping coffee while sitting outside a coffee shop underneath giant funnel clouds above. Tornado alerts are common but touchdowns are so rare that you just kind of not pay attention anymore. With that said, it seems like when they do occur they are increasingly more damaging and closer to densely populated areas. Two years ago there was one just a few miles outside of Kansas City downtown. I remember hearing the next days in the news that it was nothing short of a miracle that it didn't move toward downtown and instead went off into the rural parts of the city.
> A FANG is not a magical entity where any engineer can drop everything they're doing at the drop of a hat to work on external projects

If all our projects suffer from a known RCE vulnerability, I’m fairly certain my boss will be happy for me to drop everything to get it resolved.

That’s not nearly at FAANG, but it’s certainly not an undue burden on the schedule.
This seems like an unnecessary space hog. If you are that concerned about reproducibility isn't that what npm shrinkwrap tries to solve?
I do wonder if we need a new type of copyleft license free and open source license that permits only free noncommercial use.

Commercial use should bring with it a much difference set of obligations than non-commercial use.
Probably because furries are the people in charge of code security. People just don't wanna admit it.
Is that a comment on modern day Antwerp, or some period covered in the article?
I mean I get that they were at work. Shift change or whatever does not seem to make that big a difference. What's not clear to me is whether any of the workers were coerced to come in (i.e. they said they didn't want to and Amazon said they must regardless). And whether Amazon knew or ought to know that this would unacceptably increase the risk of harm (i.e. that a tornado was in fact likely and that being at work was much more dangerous than wherever else the workers might be).

I would also be interested in the standard practice at other workplaces in tornado alley. St Louis area gets four tornados a year on average, plus some additional number of warnings that don't end up being tornados. Is it the standard practice of workplaces to shut down in such situations? I don't remember tornado warnings being that big of a deal when I lived there but admittedly I was a dumb college kid at the time so what did I know.

I guess my point is that allegations of wrongdoing would seem to be very slightly jumping the gun in this situation. Plays well to a certain audience but there will be plenty of time for finger pointing once we know more.
I think that checking in your lock file is an actual best practice
Julian Assange ‘suffers stroke in jail’
Done. Then I delete it, and `npm install`. Then commit. The majority of people I have worked with do that. On Friday some dude was saying "shrinkwrap v2 is not shrinkwrap v1" and the advice was "delete it and npm install" then commit. (Payment company software manager).
Thanks. I can't edit my comment but I upvoted yours.
Yes, I would say it does. It expressly disclaims even fitness for a particular purpose - if you don't read it, it could very well be example backdoor code.
The RCE existed prior to this disclosure. If I can't sleep today, why should I have been able to sleep a week ago? The dirty secret is that an absolutely enormous amount of code is vulnerable and that the solution to software security is not "fix RCEs as they are discovered as fast as possible." If having RCEs keeps you up at night, then I don't believe that there is a single engineer at almost any company in the world that interfaces with the internet that should be able to sleep.

The actual solutions here are at a more abstract layer than individual vulns.
Given the distance to warehouse, perhaps they could've ordered the radio after the first siren, and received it by the second siren. Guaranteed next-siren delivery.
It serves the interests of a political elite to promulgate a feeling of great utility to them that “we’ve always been here, we are ever-present now, and there is no reason to suspect we will always exist into the future”. It serves to bolster legitimacy assertions upon geographic locales, based upon “ancient claims” or at least “claims older than yours”. This continuous-unbroken-culture-thousands-of-years-old notion I find peculiarly culturally specific. It is an amalgamation made up of Confucian respect-to-elders and venerate-the-dead I don’t agree with when the venerate-the-dead aspect comes at the expense of those living in the geographic locale, and those at the top peculiarly benefit in their pocketbooks to enforce this “ancient tradition”.

The US and indeed most major nation states also use this kind of myth making as well, this kind of behavior isn’t specific to China. It’s just not taught in schools.
Exactly reading article I for a second felt like author was either not fully aware of tooling, or doesn't care about the noise it will cause (potentially complex conflicts) checking node_modules will cause.
Can't edit this, but apparently there are multiple attack vectors and only a few are mitigated by a recent version of java. More here from brabel: https://news.ycombinator.com/item?id=29524578

tl;dr: upgrade your version of log4j.
No snarky comments from me. Just RIP and I hope their families are compensated. No compensation will ever bring back those people or extinguish their families anguish but something is better than nothing.
It's about as good a "fact" as other "well established fact[s]" in most religions, i.e. not a fact at all, but merely a strong tradition/assertion from
authority.
"I'm a native Mandarin speaker. I don't know why you need to stress "taught" or "believe" so much."

Chill mate.

Phrases using words like "taught" and "believe" are often deliberately used to indicate personal experience or environment received passively. "It happened whether I wanted it to or not".

You are a native Mandarin speaker but not quite a native English speaker yet. Your written English is phenomenal but getting its and it's right is not the end of it. Hat tip though: Not many get the its and it's thing right and I don't know why we have allowed it to be a thing - its bloody stupid and probably a joke.

The best thing you can do is to still communicate with us lot and us with you.

Take care, me old fruit!
I've looked at a lot of funding sources (govt grants, company grants, contribution "buckets", charity organizations, crowd funding, google summer of code, etc.)

One key problem is the need for "fiducial oversight". That is, a grant organization needs to know there is a professional accountant who manages the funds and receipts.

Rich Hickey can do the open source world a favor by sponsoring a couple full-time funds management "fiducial oversight" professionals (aka an accounting firm). These 2 or 3 accountants could handle grant fund management for a large range of open source projects.

Block grants could be given and distributed to multiple open source projects based on their grant proposals.

Universities have this. The only grant I got was at a university. The provost took about 55% "for support" but I did get my research funded.

Perhaps somebody who knows somebody who knows Rich could pass this along.
No---Bezos is just irritating, and we are projecting our feelings on his company. A company we all buy from? (I believe most of these billionaires are irritating hypocrites, and not just Bozo. Don't get me started on Gate's tax dodging 501c3 that gives less than 1% back to the USA and was an added tax to every pc I bought through the years. Yes--no commas.)
Whilst I fully sympathise with the points, none of them are convincing nor helpful to me. I'm all for a balanced helping of "just do whatever works", but that's my only takeaway from this article, namely: compromising on best practices can have its place.

Or is there actually a fundamental design problem with lock files in general? My sinking feeling is that it's rather just the Node ecosystem's implementation of them :/
> "他不在這裏" are the written formal version used universally.

You could also say "他不在這兒。" or "他非在此處。" and they're written differently because they're pronounced differently. It stands to reason that if someone has a fourth way of saying the same thing with different words, they might also want to write it differently.
"life"

one doesn't live a live, they live a life.
The article doesn’t support what you are saying. Do you have evidence to support these theories?

What happened is terrible and is part of a much broader natural disaster. Trying to turn this into some shallow Amazon shaming is unfortunate.
>It's a big deal because most large users of Java aren't actually using the newer versions. It's very hard to source that claim, and I apologize for the lack of hard data, but in my experience with "enterprise Java", it's almost all still Java 11, or even Java 8.

It should still not be a big deal, because there are mitigations in place for Java 11 and Java 8 - just upgrade to the latest patch revision: 11.0.2 and 1.8.0_192 or later exactly like an operating system security patch. Right now, it just feels like a big deal because everyone likes to pile on Java.
Lot of folks who have only used Linux would be stumped if they see "cd: not found"
The google3 repo is probably terabytes at this point
Red Delicious was actually a great apple when it was introduced. Read up on it the history of how this changed is interesting and kind of sad. The problem wasn’t the fruit, the issue was people could slowly change it while keeping the name.

As consumers began to purchase more of their food from large supermarkets, the apple's popularity encouraged commercial growers to increasingly select for longer storage and cosmetic appeal rather than flavor and palatability, which resulted in a less palatable fruit.[8][9][2] In particular the selection of redder fruit caused deselection of flavor, and the genes that produced the yellow stripes on the original fruit were on the same chromosomes as those for the flavor-producing compounds.[2] Breeding for uniformity and storability favored a thicker skin.[2] Later, as other cultivars entered supermarkets, demand for the 'Red Delicious' declined.[9][10] https://en.wikipedia.org/wiki/Red_Delicious
No, the fact of having these vulnerabilities is not a problem (I mean, obviously, but at the level you describe). The problem is having them be known to the world. Especially with a level of publicity like this.
It's awesome apart from the vast majority don't use yarn.
> The market value of an open source library is the price you’d have to pay to replace it.

Nope not at all. As long as somebody is willing to provide the code for $0 then the market value is $0. It is basic economics. The value of something is whatever you can get somebody to pay for it.
Social media always censors in a way by promoting certain content and burying other content. It is mediated communication not direct communication, and these platforms are neither fair nor open. They haven’t been since the advent of algorithmic timelines and engagement maximization.
Off-topic but very important:
The widespread misuse of the word 'dependency' is very very icky, linguistically speaking. This word originally meant: 'in a state of being dependent'. Usage: "Ronny hated his dependency on the kindness of strangers.". But it's being used to refer to the 'dependent', as well as the 'dependee', which is very poor form:

https://english.stackexchange.com/questions/25575/what-is-th...

https://wikidiff.com/dependee/dependent
Not sure why you're being downvoted, the events are already evidence that the facility was not shut down during a tornado that was known to hit the area. Workers were changing shifts when the tornadoes hit.
Being alert and prepared is safer, and neither is all that possible while working.
Communication in Airgapped Systems [pdf]
Side note but not captioning the xkcd graphic and modifying it is a bit sleazy. Yes, it is mentioned in the following paragraph but a caption would be better.
I've just created an ubuntu instance (2 core / 6 gigs / 50 gigs disk) without any issues. The process is a bit clunky and not too user friendly, but you have lots of customization options before you deploy your server.

From what I can see, thee free tier gives you up to 4 cores / 24 gigs and up to 200 gigs of disk space. You can create up to 4 servers, or use all resources in 1 server.

This seems to be the deal of the year.
yeah dependency fixing is the way to do it

with NPM shrinkwrap you lock down the version of the package you installed and their deps. That way you can use the same package on all envs.
Helps with testing and debugging as you're removing a variable (bad deps, outdated deps, newer deps etc)
You could call it the Fifth Circle (https://en.wikipedia.org/wiki/Inferno_(Dante)#Fifth_Circle_(...) of Hell as a service.
big tech bad!
You don’t need it. But you will be overtaken - by everything including the heaviest trucks. 60 is not a safe speed to drive on the Autobahn. It forces others to overtake and take the left/middle lane, which can impact vehicles there driving at much higher speed.

But I think driving 60 on the right lane is also not the scope of the system - it’s about handling traffic jams.
Hmm. I guess I should've checked my phone. Thanks for the tip!
14 people in total died from Ida-related storms in the NY area. To my understanding based on reading neighborhood group fb posts, mostly people with compromised mobility who were unable to exit flooded apartments. I don't believe any Amazon workers were harmed or killed.
Indeed. What's probably needed here is a way to review a diff of the contents of the updated packages. Checking them is is just a brute-force way to do that.
Apple’s Newest OLED Supplier
Peter Thiel gonna have to get his donors on that treadmill before they donate.
In the past for a large Python project I've handled this using a separate repository for all of the dependencies - that way you can still get work done even if PyPI is unavailable for some reason, but you don't bloat your main repository with an extra few hundred MBs of stuff.
> Democracy has always faced the problem that come elections, every living soul has one vote.

The one people, one vote, is a problem that has been 'fixed' since the start with gentle corrections and tricks. If your vote score 1 point and mine score 1000 points, then it does not matter if you are very well informed or not.
This came across my Twitter feed just now: https://twitter.com/LCampbell_35/status/1469815411462000647

Seems credible based on photos.
> I'm not taught by anyone, nor believe that dialects are mostly similar. I experienced it. Most dialects, Cantonese included, use the same Chinese character system. In writing, we would use either simplified or traditional character sets.

Yes, that's true in writing. But it's only true because there are only written forms of Classical Chinese, Modern Vernacular Mandarin and Modern Vernacular Cantonese and the last one is only really used for newscasting and court reporting. Everyone who reads and writs Chinese is thinking in Manadarin, even if they can't speak it. The different Sinitic topolects are as divergent as the Romance languages or the Arabic "dialects". They're mutually unintelligible. FuSha or Modern Standard Arabic, is a foreign language to basically every Arabic speaker, as Latin is to Romance language speakers or Mandarin is to the 60% of Sinitic language speakers who don't speak Mandarin at home.
Why should they? The developers giving away their work for $0 are telling the world that their work is worth $0. So why should the companies pay more than $0 for it? That doesn’t make sense at all.
> Yes, open source licensing allows forking, but that's not something you'd do, for instance, because a maintainer fails to respond to your issues on GitHub.

Huh? Not getting satisfaction, however you want to define that, from upstream is the main reason forking occurs.
I’m a big fan of Mazda (specifically the Mazda 6). I feel like it looks much more expensive than they actually go for.

https://www.caranddriver.com/mazda/mazda-6
The Assange Case Is the US Defending Its Right to Lie
Accelerate is a pure C API.

Metal is an Objective-C API. It is possible to call arbitrary Objective-C APIs from pure C using the Objective-C runtime functions, and Apple themselves recently released a Metal API wrapper written in C++ that works this way. [1] I wouldn't recommend that approach, though. With Objective-C being an almost-pure superset of C, it's a lot easier to just build your code in Objective-C mode and make native Objective-C calls where necessary.

[1] https://news.ycombinator.com/item?id=29289761
It doesn't ring true. It's false, thats it. You are saying that even if you used an overturned century old case to justify censorship, you are still right? Why exactly? You might want it to be true but using it as a foot in the door to justify even more slippery slope restrictions just does not work very well when it's not been relevant for 50 years now.

And we lived all that time without the sky falling over, or society collapsing into more intolerance than 100 years ago. So much so that a lot of people still think that it just ought to be illegal. Doesn't that prove that we actually don't have to restrict speech or "intolerance" ? Or do you think that we are worse off in that regard that back when shouting fire in a theater was a reasonable restriction on free speech?
A huge demographics play Minecraft. Kid of silly to make a generalization like that.
I worked at a PacNN/Ivy type university with a gigabuck+ endowment. They always cried poverty during recessions and did arbitrary, across-the-board cuts to "tighten the belt" when they were wasting absurds amounts of money elsewhere but cutting useful things and people arbitrarily too.
Twitter is a great source of information; when there's a tornado warning I keep a close eye on #gawx (substitute first 2 letters for your own state). That ends up producing a feed of info from meteorologists and amateur spotters with a mix of official reports, amateur info, photos, radar pics, etc. Often any photo or video will have comments from TV stations asking for permission to rebroadcast.
I Used to Earn Money Looking for Lost Dogs, Like Ace Ventura the Pet Detective
You're largely correct, but I'm not speaking about peer pressure.

'Tis the season, so we've been listening to a lot of Christmas carols.

One of my favorites is Good King Wenceslas, which concludes with the verse: "Therefore, Christian men, be sure, wealth or rank possessing, Ye who now will bless the poor, shall yourselves find blessing."

Charity used to be a behavioral expectation in the West. Charity is not "giving money to somebody else so they can do charity on your behalf" nor is it "paying taxes to fund social programs". Charity is you, directly, investing your resources in your community, with no expectation of return.

Today, this assumption no longer holds. The result is the current state of open source, which needs to figure out a license that extracts value from players big enough to pay it, without punishing upstarts into oblivion (and thus forming a protective moat for existing large players).

Some percentage of net revenue share strikes me as the right sort of license, with sensible caps and/or some sort of shared pooling mechanism.
Maybe for most, but some people naturally sink.

"The primary reason that certain people cannot float in water is an abnormally dense body composition. A higher bone density combined with a higher muscle mass percentage and a low body fat percentage will result in a natural inclination toward sinking rather than floating."
This site has a very anti-labor bias, as most people here expect to be running companies (or already do).
You posted this elsewhere in the thread but I just want to clarify here as well. 14 people in the whole new York area were killed. No Amazon workers.