skysight-inc/HackerNews huggingface dataset:
> It is like that, because economic system is designed to work that way.

"Designed" is probably putting it too strongly. But however you characterize the process that got it that way, people did it, and people can change it with enough effort. In fact it is constantly changing, and each of us can decide the direction we are going to push it, and how hard.

"And friends, they may thinks it's a movement." — Arlo Guthrie, Alice's Restaurant Massacree
I don't understand your analogy. Are you saying once Microsoft drives Borland out it will...cut salaries?...raise prices?
plus it’s not always the wind that does the damage, it’s what the wind picks up and throws at you
So instead of downloading the current set of dependencies after cloning, you download every dependency ever used while cloning? And you do this to "save bandwidth"? Doesn't make much sense. (Yes I know about shallow clones, but it's often nice to have the full history around)

Any reasonable CI tool will have a way to cache generated assets based on file contents, that's the way to go here IMO.
I'd be a customer for sure.

Iamgine how much effort could be saved if instead of every manufacturer designing their own fridge, and parts, there were some standard designs, and standard interfaces, so that you could mix and match (and replace, or upgrade), motors, compressors, shelves, doors, etc. Perhaps an open-source community trying out new designs too.
This is bullshit indeed. Amazon is terrible.
Not everyone that was fascinated by computers as a kid became a software engineer! I'd assume most didn't. I was obsessed with dinosaurs as a kid and I didn't become a paleontologist.
> We've come up with a rule that helps us here: a change that updates node_modules may not touch any other code in the codebase

What? What if the dependency upgrade requires code changes? Master is just broker until the second MR merges?

This all sounds like terrible advice.
Add Auth0 Authentication to a Web Application in 5 Mins Without Writing Code
I leave this here if you are looking for custom tablet / PC
https://customizetablet.com/
Why don't we cancel Oreos, because everyone "knows" that's just slang for a person with one black parent and one white parent?

If this product has 2/3 market share, have you considered that it is the best product on the market?
Actually “start it up”.

Edit: “Start me up”, that’s it. Thank you, child comment.
Indian Prime Minister Narendra Modi’s Twitter Account Gets Hacked
I tasted heirloom tomatoes and they weren’t special
I should probably have qualified my first statement: There is no longer a reasonable question for which "Oracle" is a good answer.

I agree that Oracle definitely used to be the right answer for enterprise development. These days however, the senior management panacea du-jour is AWS.
Yes, it's very mysterious. If everybody put their money in the bank they would all be guaranteed a positive return on their investment, but there is no inflation and the money supply is fixed. So where does the money come from?
Are you looking for custom tablet/PC?
I mean it already works like that in cryptocurrency today. Look at the rates paid on stablecoins. For example look at UST a US dollar stablecoin. It currently pays 19.4% APY on savings. There are risks but for 2% on Nexus Mutual you can be insured against a failure of the dollar peg or a failure in the smart contract. The net yield on a USD pegged stablecoin with insurance is 17.4% - handily beating inflation risk-free.

If the central bankers couldn’t print money you could beat inflation with any bank account.
They are. Those results appear after the title, description and similiar matches.
Yarn’s offline support is not directly tied to PNP. Yarn v1’s support for “offline” installs was a day one requirement, and as I understand it one of the primary drivers for Facebook engineers (at the time) to drive the creation of Yarn.

If offline installs is what you want, I don’t see any advantage of node_modules compared to this feature - only disadvantages (size, noise, and cross-platform incompatibilities).
I just leave this link here if you are looking for custom rugged tablet/PC
https://customizetablet.com/rugged-tablet/
Yes, I had a very mundane childhood and wouldn't have wanted to switch spots with Jade according to this story.
> One day I realized that I am who I am

Quite right. You don’t even need a concussion to have this quandary. Low blood sugar, lacking sleep, too much/little caffeine, stressful day, etc, all affect how I react but in all cases it was me albeit not at my best.
And enabled by default. That's the most mind-blowing bit of this feature. The backcompat argument is a deflection for shipping a time bomb into people's codebases.
Show HN: I created an app for fitness tracking with YouTube workouts
I know. I’m familiar with severe weather that produces tornadoes.

People hiding in bathrooms or anywhere they could doesn’t sound like there were shelters appropriate for tornados or even a plan in place or if there was one it wasn’t used.

It’s inexcusable for people to die on the job like this, especially on a job that doesn’t give you easy access to live information, due to the work environment, or even even the ability to hear or see what’s going on outside.
Imagine if Republicans got to vet and affirm any Democrats who would serve in congress, how much power do you think the Democrats would have? Regardless, it’s not like the NPC has much power anyways, they basically just rubber stamp whatever the politburo decides on.

Also paradoxically, given that the NPC has a quota for non-CPC members, it is often easier to get a seat being a non communist than a communist.
it’s not my intention to convince you that all traditional medicine is effective, just that some traditional medicine is effective, and testing the methods used by herbalists yields more results than starting from scratch in a chemistry lab (tho of course the chemistry lab comes in handy to isolate and eventually synthesize the molecules that are found to be effective)

You say “So little they can prove” but I’m saying they have proven a lot, and non-western medicine just becomes western by virtue of being adaquatelty studied. We may be agreeing more than you think.

“Plants, People, and Culture: The Science of Ethnobotany” is an excellent book on the topic.
> I'm sure that many "believe" so, but mostly because they never interacted with the Cantonese language, and therefore have a naive misunderstanding.

This was my experience having learned only the Mandarin dialect as a child. I kind of assumed that other dialects were merely different pronunciations of the same sequence of characters—more a naive notion than something I was “taught” or “believed”. My naive notion dissipated as an adult as I traveled more and encountered more dialects.
All of that was my point.
> While VLC had so many options for nothing I'd need.

This has next to zero impact on its performance, as the ncurses player talks exactly to the parts of libVLC it has to.

>Instantly. Sometimes on even older systems than yours. With probably less RAM. Say 8GB, with something booted from USB, running 'live', so only 7GB, no SWAP.

The system I tested this on has 4GiB of RAM. And I have used `VLC -I ncurses` from live systems-on-a-stick as well. It runs before my finger leaves the ENTER key, same as mpv.

> Maybe you compiled yours with all the bells&whistles which aren't needed for sufficient local playback?

I'd be happy to repeat the measurement with different settings.
Someone should tell them that any system that it logging user supplied data can be affected.

Not only "user facing" systems.
Not even a WAF can protect these.
The log4j exploit was based on remote class loading, not serialization... though if your JVM protected you against remote class loading, it's indeed correct that one way to bypass that protection was by using a serialization attack.
“It’s not that the wind is blowing, it’s what the wind is blowing. If you get hit with a Volvo, it doesn’t really matter how many sit-ups you did that morning.” — Ron White
Happy for feedback about the app. You can use this unlock code to remove all ads: unlock2604
Fun story: One night, in Tokyo, was walking to the store. There was this well lit, tree-lined path from my house (at the time) to said store. On this path was one of the few remaining payphones I've seen (or paid attention to), in some time. I saw an older gentleman using this payphone -- which in this day and age was strange enough, so it caught my eye. As he was exiting, he dropped some cards from his wallet, and seemed to not notice, so I picked them up and handed them to him. He thanked me, then asked in pretty decent English where I was from.

After some brief chatting, turns out the guy was in his 70s, had studied in the US and France when he was younger, and is currently a shipwreck hunter -- pretty wild background!

Anyway, he told me about living in the States as a Japanese immigrant way back when, and how back then people would scoff at Japanese cuisine. Saying it smelled bad, and no one wanted to eat raw fish. Pretty much, no one liked it -- at least according to him.

Of course, fast forward a few decades, and Americans seem to not be able to get enough sushi in their mouths! Go figure...
Title should read "$40 million grant..."

Openvaers.com
The original maintainer died in 2001. Maybe they mean new as in a section that was added by someone else. If that's the case here, it's totally acceptable to always have it be called new
I'm not sure it's what he said. Mine has a radio.
Bad pedagogy is when you say that one method is right, which is what I’m complaining about.

Students should be encouraged to figure out what approach works for them. For example, if you’re multiplying 19x3, some students might think 19x3 = 30+9x3 = 30+27 = 57, and other students might think 19x3 = (20-1)x3 = 20x3-1x3 = 60-3 = 57.

Telling students that one of these ways is the way you SHOULD multiply—that’s bad pedagogy.

Knowing multiple approaches to solve the same problem is only something we really ask for math majors. It’s not something you’re expected to do until you get to topics like analysis or abstract algebra, where you’re asked to prove that different constructions have the same structure.
Open source ain't broken .... Its the expectations that have changed that is all. Somehow lotsa people think open source is a business model, where

1. release code with OSS licenses
2. let it blow up
3. profit???

If you want to make money off OSS, dual license it and those who want will buy maintenance contracts, don't expect companies to pay back for what they use. Companies are completely amoral .
wow look at this guy, got the upgraded entertainment package with AM/FM radio!

(I kid, seems to be something that changes with the model year)
> The three letter code is not currently used by Ethiopia (they use .et and .com.et), and the ENS team is in negotiations with Ethiopia for the 3 letter TLD

Did I say 'used'? I said 'reserved' and the ENS team knows it is 'reserved' FOR Ethiopia, otherwise why are they negotiating specifically with them in the first place?

Relying on 'trusting' a so-called 'DAO' with all .eth domains sitting under the root multisig control is no different to trusting a subdomain provider with ICANN-like governance but this time, they're using a 'blockchain'.

All of the above sounds like a great 'illusion' to decentralization. I expect ENS to be no different to ICANN governance given that they can have full control over any of the domains on the ENS root. [0]

[0] https://docs.ens.domains/frequently-asked-questions#who-owns...
> the vulnerability would make it possible to post server environment variables to any remote server, regardless of JRE version.

I've been able to achieve RCE as well by still using LDAP, but a different lookup mechanism (if you learn about LDAP, you'll quickly realize there's several ways to do this). RCE does not require remote class loading, that's just the easiest way to achieve it.

If your JVM triggered the evaluation of any unsafe jndi string, you should assume an RCE is very likely possible on your environment.
Context. You jumped into this conversation very much on the side of the guy who did say: "warnings for the severe weather storm that would have prevented people coming in to work".

Your comment about tornado warnings can ONLY serve to confuse people and potentially give them a very mistaken impression that tornadoes can be accurately and precisely forecast, such that advanced evacuation of an area is a viable strategy.
More than 80 feared dead after tornadoes hit central and southern US
Anyone arguing that Taiwan is not a country is not arguing in good faith, unless they're making the joke that the Republic of China still has sovereignty and will one day suppress that nasty uprising.
There's a good chance his server can't handle HN level traffic
Ew. Not surprised you can buy the stuff that professionals shy away from for being too damned toxic, to your door, overnight delivery. Plus good reviews, hard to leave a bad review for it when you're bleeding out in the ER.

I don't use poisons for pest control. We have too many owls, hawks, and the occasional eagle overhead. I'll kill stuff mechanically (damned pocket gophers...) and toss the carcass out where something will find it and eat it, but I won't poison them. The best mouse trap is actually a slightly erratic supply of cat food.
Thanks it looks good. I wound up not getting it though as the shipping prices were somewhat prohibitive. $18 for the 2 lb bag. Not in the mood to spend $28 on two pounds of rice no matter how good it is.. will stick with Nishiki cal rose rice I guess..
Completely understandable critical point on why "backward compatibility" means so much. I remember submitting a bug report and a pull request in the Amazon SES SDK library for .Net that basically fixed an issue when trying to send an attachment to anyone in the BCC field, just to be told it couldn't be done since it would break backward compatibility...even when the feature itself was broken....
Cut the tea out of a bag and take a lighter to it. You'll know.
That's incorrect, while LDAP portion of this problem is mitigated im new JDKs there are other vectors of attack like RMI. It's by far the easiest and most severe vulnerability I've ever seen.
Close, it was “Start Me Up”.

https://www.aaaa.org/timeline-event/start-3-million-anthem-l...
Ah, a fellow practitioner of fusion cuisine [1].

[1]: https://en.wikipedia.org/wiki/Fusion_cuisine
Most of the online discussion centered around China is just US domestic political projection using an imaginary China as a mirror, or as a counterfactual which doesn't exist, and then there's the obvious propaganda too.
The engineering challenges aren't equivalent. There is no practical engineering that will allow a building to survive an extreme tornado event unless you want to build everything as an underground bunker. We are literally talking serious nuclear weapon energy equivalents, delivered in the way tornados deliver it. That they erase towns is not a surprise.

However, these events are relatively rare and, unlike a M8+ earthquake, the effects are extremely localized. For example, if there was another New Madrid fault zone event at the same scale as happened in the 19th century, which happened in the same region, the damage would dwarf extreme tornado events.

We know how to build practical buildings that can survive severe seismic events, within limits. We do not know how to build practical ordinary buildings that can survive an EF5 tornado, same way we don't know how to survive a direct nuclear strike. Those weather systems are a serious force of nature.
Basically came here to say this. The whole article felt very silly until I was like “oh wait OP stated early on he works at google… yeah seems about right ~closes tab~”
While the Sinitic languages are similar, they definitely have distinctions not only in pronunciations but also in grammar and vocabulary, even if you do approximate the writing using Mandarinized characters.

Just as an example, the placement of adjectives in Cantonese vs Mandarin differs. Consider the sentence "I eat first":

- Mandarin: 我[subj] 先[adv] 吃[v]。

- Cantonese: 我[subj] 食[v, Cantonese equivalent of 吃] 先[adv]。

Another example is that some terms that exist in one Sinitic language simply do not exist in another one, e.g. the word for "good night" in Mandarin is 晚安, but there is simply no way to say this at all in Wu (e.g. Shanghainese, Suzhounese) Chinese!

I find that a lot of Mandarin speakers aren't aware of this due to the extensive Mandarinization of Sinitic languages as a whole, and there are a lot of distinctions between a lot of them (e.g. Min Chinese is a lot more closer to Old Chinese and preserves a lot of its traits compared to Mandarin), and perhaps this is a testament to the point the article makes.
That map is showing the only definition of tornado alley there can be if you insist on a single definition: where tornados happen.

I'm not sure who your most people are but they ain't mine.
Melissa Fleming and Jeremy Heimans on countering vaccine falsehoods
Until very recently, the official LTS release of Node shipped with an npm version that would ignore lockfiles during certain situations when running `npm install`.

If the package.json listed a fuzzy dependency and the lockfile was pinned to an outdated version, it would just be updated anyway. This was fixed in later versions with the release of the lockfile v2 format, but the fix was never backported to older versions of npm, even though those versions of npm were the recommended, default versions that shipped with LTS Node installs if you went to the main website or installed from a software repo.

I think that for a non-trivial number of people, they may not have a lot of trust for lockfiles because they tried using them and they just straight-up didn't work.
I will pay $2000 to the person that connects me with a romantic partner
Yeah. Steve Jobs didn't spend half an hour demoing the Mac to me. My dad taught me how to use a computer and let me use his. That seems infinitely better to me.
You can have multiple commits in a PR
What's surprising is why people would buy this over the more obvious search result 'Rat Poison'. Perhaps Amazon has already adjusted the search results but the top results for 'rat poison' were Cholecalciferol and Bromethalin based products.

Does Brodifacoum work the best? What's driving consumers to search for a specific type of poison.

> Things haven’t quite worked out as the EPA envisioned. When I first started browsing Amazon, neither the cost nor the size seemed particularly egregious to me. A single bucket—similar in size to a container of birdseed—seemed sufficient for my small yard.

Is putting poison over an entire yard a common/reasonable usage? I've really only needed to put poison out in a few problematic locations i.e where rodents have been seen like garages, basements, food pantry, etc. Covering an entire area like you would with grass seed or rock salt seems almost deliberately malicious.
Rice is quite literally the only reason the earth can support 7 billion people. Its cost benefit analysis is making sure we don't all die.
That's exactly what Firefox containers do. I have a different color for each one.
Also if you use the yarn deployment plugin (forgot the name), it will create a deployment folder for you that does not contain dev dependencies. This way we found a package that was installed as a dev dependency but in reality was a regular runtime dependency.
We took a shot at this with Gliph.

The problem is building a social network people want to use is a problem well out in advance of faceted identities.

That is very hard. Building identity management first is a solution in search of a problem.
This is much more fair than the government and the so-called independent media doing it through back-channels, no? I personally would prefer if my government named the office that controls national broadcasting as the "The Department of Information" or better yet, "The Department of State Propaganda"

Some interesting links:

> https://twitter.com/oliverdarcy/status/1468064220843425796

> https://twitter.com/disclosetv/status/1469331084550852615

> https://twitter.com/AuronMacintyre/status/146832775301131879...
> A properly engineered reinforced concrete building would easily withstand that.

You could build a building like a tank, but it would price most people out of the market. Doors and windows in that structure won't be able to withstand the obscene wind forces however, so everyone inside will still likely be killed by the airborne debris, anyhow. You really wouldn't have time to install steel shutters on the windows and bar all the doors like you'd need to. But hey, the building will remain standing, so that's a win, right?

Instead of all of that, just requiring a small emergency shelter in each home might actually keep the occupants alive.
Why are people still writing server-side code in Javascript? It was a cute idea a decade ago. But now you have to twist yourself into knots to prevent a ton of problems. Nobody will use C today because "memory safety", but everybody will use Node.js despite the dependencies being both a security and usability nightmare. Imagine if I suggested using Bashscript for a web application backend.
Looks like the hacker was like a dog chasing cars. Didn't know what to do with the account once they hacked it.
I'm not sure the concept of "onus" really applies here.

Each reader can decide for himself how much evidence he needs to be persuaded.
Kubernetes Operator: What It Is and Why You Should Care About It
Here's a guide to how it doesn't work:

* 1 point - unlocks commenting

* 5 points - unlocks submissions

* 10 points - unlocks "ask"

* 50 points - unlocks "show"

* 100 points - unlocks flagging comments

* 500 points - unlocks downvoting comments

* 1000 points - unlocks flagging submissions

* 5000 points - unlocks downvoting submissions

* 10000 points - unlocks editing/deleting your own comments/submissions of any age

* 50000 points - unlocks editing/deleting other people's comments/submissions of any age (i.e. mod status)

* 100000 points - unlocks selection by YC for your startup
What Hypocrisy Feels Like
*are you using ElasticSearch, flink, spark, prest,…etc. do they read in user data supplied by your front end. Could this user data end up being logged intentionally or part of an error log output.
If so, you might be vulnerable and should update those systems.
Whether he's right or wrong can be debated, but reducing the argument to "follow industry practice" is a perfect example of cargo culting. Industry practice needs to be based on something today, not something from ten years ago that might or might not be valid anymore. He offers a long list of arguments and even though I don't check in node_modules, some of the arguments are compelling - e.g. we already want reproducible builds and use package-lock, but why not skip this step altogether? Why not skip setting up cache on your CI if you don't need to? What if knowing the details of your package manager and CI is useless because there are simpler ways of doing things. I'm not that convinced that a few commits would create a gazillion GB repo, so his arguments seem stronger.

But "not best practice", qed.
I thought the name was a little weird so I followed the link and read, despite not being interested in home theatres especially, and it turns out I was right - Purecript is actually Purescript.
Also, for a given resistivity/dielectric and thickness Resistance and Capacitance also scale with length. That means that RC settling time goes as length squared (width roughly cancels since R goes down while C goes up)... ignoring any transistor scaling, just the wiring limits speed very quickly.

Reticle size (limited by lens DoF) is roughly 30mm square, and GPUs have been close to that for years.