skysight-inc/HackerNews huggingface dataset:
Most people using e.g. spring boot or quarkus would end up using the defaults that come with those frameworks. For spring boot, the default is actually logback. However, you can switch it to log4j2. https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-s...

Log4j2 never quite got the same status that v1 had. V1 should be considered a bit obsolete at this point. It still works of course but it has some performance issues that both log4j2 and logback try to address.

The issue with high profile vulnerabilities like this is that there are a lot of projects where dependencies are rarely updated.

I update aggressively on my own projects to stay on top of changes and keep the effort related to mitigating compatibility issues at a minimum. A nice side effect is that you get all the latest security, performance, and other fixes. In my experience, updates get harder the further you fall behind. So, the longer you wait, the more likely you will have a lot of fallout from updates and the more likely it is that you will be exposed to pretty serious bugs that have since been addressed upstream.

If you are like me, I can recommend the excellent refreshVersions plugin for gradle. It makes staying on top of dependency updates a breeze. I run it every few weeks to spend a few minutes updating misc libraries, and verifying everything still works. Run the command, update to the suggested versions, create a pull request and merge when it works.

Occasionally there are issues with specific libraries but 95% of the updates are completely painless and the remainder are usually pretty easy to deal with. And if there are show stopper issues, I want to know about them and document them why we can't update.

I would recommend doing the same for packaged software. I work with a lot of customers running ancient versions of whatever for no other reason than that they seem a combination of fearful, ignorant, and indifferent about what will break because they can't be bothered to even try. Mostly updating them to more recent versions isn't that big of a deal and it tends to address a multitude of performance, security, and other issues.
How is this in any way related to the OP's post about lifespan?
no why?

The task of the Microservice is to convert the pdf to stardust and to return it to its sender. so no auth.
Furthermore its most likely only reachable through the local network, or at least should be if you want some stranger not to be able to also make stardust from pdfs.

Monitoring: are you trying to say that its a lot esaier to pick up one logfile thant lets say 15? because they should be aggregated somewhere anyway no?

Deployment: Depending on anything you listed how do i do anything? Of course if have to define it but if you want a fancy example: k8s argocd canary deployments done. I literally set it up once.

security? Really?
Please dont get this wrong but this feels to me like whataboutism but well here i go:

i implement security just the same way as i would in the monorepo. The thing/person/entity just has to look into more repositories ;)

It comes down do one sentence i think:
State is not shared, state is communicated.
Presumably they can see how many times a player has been reported to abandon a game ahead of time. If it is the first report, I can understand they do nothing. If it is report number 10 ...
This ^

> Perhaps it's not as life altering as jail or fines, but still: no holidays in Florida or Hawaii. No meeting peers at a congres in the US. Not even using flights from American carriers to go to South America, as they will likely pass via a US hub.

This is both telling, and curious. The kind of mental model of the world required to foster this as a concern for most people, is interesting.
OpenGL, OpenCL, OpenVG, OpenXR, none of them are open source . Seems like that's what they were going for to me
Anyone feel like covid has exposed the western obsession with optimization. There were even people who preferred Pfizer’s vaccine over Moderna’s because the risk reduction was some marginal number like 96.5% versus 94.7%? Clearly statistically insignificant?

Just because the Moderna vaccine is 50x less effective (measure by neutralizing ability of generated antibodies) doesn’t mean it doesn’t offer substantial protection.

There is this weird obsession with driving risk as close to 0% as possible with no regards to relative risk.

2x as man people in BC, Canada have died of drug overdoses over the past 2 years than Covid. And nobody blinks an eye at those deaths.
Newt Gingrich was a first-term congressman when the Carter Administration broke up the old Department of Health, Education, and Welfare (HEW) into the Department of Education and the Department of Health and Human Services. HEW itself dated from the Eisenhower Administration, but there was an existing Office of Education.
European/EU-based email providers
I like this setting, but it makes the home page look barren to me. It totally removes the central block showing the leaderboard and tournament winners, becuase they contain ratings.
Show HN: A JavaScript schema checker which can return well typed results
A tantalizing clue to why omicron is spreading so quickly
> You would think so but why have solutions like Mumble[0], which allows for extremely low-latency and high-quality voice calls and has existed at least since the mid 2000s, not become more popular during the pandemic?

Because there is no official Mumble server.

People know how to download an application, click "install", and register an account. But ask them to open a port on their router's firewall/NAT, or set up DNS, and you instantly lose 99.9% of your user base.

It could have been different, but lay people never had the chance to install their own server. They couldn't do it with Dial Up, they didn't have the upload bandwidth with ADSL, they didn't have fixed IP addresses, there's the NAT hurdle, outgoing SMTP is blocked everywhere… that ship has sailed. Even I host my websites on a remote virtual machine I rent.
See https://en.wikipedia.org/wiki/FOGBANK and https://www.lanl.gov/orgs/padwp/pdfs/nwj2_09.pdf (under "Fogbank: Lost Knowledge Regained").
Is there?

I mean I know there's "Year of Rail" and all that, but that doesn't seem to translate to anything more than words right now. (Like - no actual trains you could book.) The number of night trains has decreased over the last couple of years. It'd be nice if that trend would be reversed, but that will take more than proclaiming a year of rail.
If you're doing user-supplied CSVs, definitely... but if you are ingesting CSVs from a known source with known format (<insert audible sigh here>) it can definitely make sense to use a high-speed optimized ingester.

One might wonder if it might be worth the time to look into optimising the runtimes of various languages. I took a look, all operate on naive byte-by-byte scanning, and all sans PHP are written in the respective language which means any form of SIMD optimization is right off the table (okay, maybe something could be done in Java, but it seems incredibly complex, see https://www.morling.dev/blog/fizzbuzz-simd-style/):

- PHP isn't optimized anywhere, but at least it's C: https://github.com/php/php-src/blob/1c0e613cf1a24cdc159861e4...

- Python's C implementation is the same: https://github.com/python/cpython/blob/main/Modules/_csv.c

- Java doesn't have a "standard" way at all (https://www.baeldung.com/java-csv-file-array), and OpenCSV seems the usual object-oriented hell (https://sourceforge.net/p/opencsv/source/ci/master/tree/src/...).

- Ruby's CSV is native Ruby: https://github.com/ruby/ruby/blob/bd65757f394255ceeb2c958e87...
> Chatting with random people on the internet is much more unpredictable

Not particularly the best comparison, we are talking here about applications and services which we sell and we have to make sure that we have the confidence that we can trust our own systems and the customer can rely on our word and engineering skills. Right now we are still in the primordial soup of AI. As long as we do not have proper methods to verify and certify our models, they are dangerous and unpredictable.
I agree that local conditions make a huge difference, even within school district: but I think the parent comment's point had to do with virtual classes.
"The future of something is way better then it is now"
Tried fastwsgi + falcon cythonized.

Running 1m test @ http://localhost:5000
8 threads and 100 connections
Thread Stats Avg Stdev Max +/- Stdev
Latency 1.41ms 109.36us 3.85ms 76.27%
Req/Sec 8.53k 625.45 25.69k 79.77%
Latency Distribution
50% 1.43ms
75% 1.48ms
90% 1.53ms
99% 1.62ms
4072168 requests in 1.00m, 454.37MB read
Requests/sec: 67816.66
Transfer/sec: 7.57MB

Pure fastwsgi on same machine

Running 1m test @ http://localhost:5000
8 threads and 100 connections
Thread Stats Avg Stdev Max +/- Stdev
Latency 645.52us 30.50us 1.33ms 82.06%
Req/Sec 18.67k 795.08 36.56k 86.86%
Latency Distribution
50% 648.00us
75% 658.00us
90% 668.00us
99% 736.00us
8919901 requests in 1.00m, 867.68MB read
Requests/sec: 148419.82
Transfer/sec: 14.44MB

Damn nice.
An analysis about people reactions to threats would be as devastating and probably even induces such skepticism.
This is where Go shines in my opinion. It's really hard to write smart Go code.

Sure it is a bit verbose but dam is it easy to understand due to sheer bluntness and lack of magic.
The most commonly used meaning of “subscription” is literally “the action of making or agreeing to make an advance payment in order to receive or participate in something.” And if the original commenter didn’t mean to be misleading and meant they had free accounts on both services, why mention having a “subscription” at all? It’s completely irrelevant.
Doesn’t this highly depend on your use case?

For example, right now I’m building a system that will take in a URL, crawls the webpage, and does some processing on the data. The whole process takes a good 10 seconds.
I designed this as a micro service, simply because I know URLs will need to be queued up. Should this have been done as a monolith? Or am I right that micro services was actually the right approach?
still, the new Dune explains itself better than the old Dune. Meaning the old Dune was even more whack (in every possible way) than the new one. Still, all these movies (Dune A and B and also LOTR) have one thing that makes them worthwhile: gorgeous visual world building.
Russian court accidentally confirmed Russian military presence in Ukraine
The only issue I have with microservices is when you're dealing with atomic things. Like in a monolith you'd probably just stick it all in a database transaction. But I can't find any good reads about how to deal with this in a distributed fashion. There's always caveats and ultimately the advice "just try not to do it" but at some point you will probably have an atomic action and you don't want to break your existing architecture.

Distributed transactions? Two stage commits? Just do it and rely on the fact you have 99.9% uptime and it's _probably_ not going to fail?

Anyone else dealt with this headache?
Yes, you've made the same argument as the article, estimating the impact of producing the toilet paper but not that of producing the bidet.

What is the impact of acquiring (mining?) the ceramic and metal parts, and then manufacturing these into a bidet and fixings?

I think it's likely that the impact of the bidet is lower by the end of its lifetime, but an argument which says, 'manufacturing and installing a bidet has a similar impact to producing x rolls of toilet paper, and so after y years then the bidet can be considered better for the environment' would be much more compelling to me because it doesn't look like it's trying to hide half of the argument
It's not a long route, just 3.5 hours one way, but they are preparing to restart the "allegro" (St Petersburg - Helsinki) high-speed train service soon, iirc.

The fun part is: Finland now requires a proof of vaccination to enter but doesn't recognize Russian vaccines, and vice versa. So as a Russian, if you really want, you could get Pfizer or something in countries that would let you enter with a PCR test or recognize Sputnik V, and then you'll have a EU-worthy vaccination certificate. And that's on top of still needing a Schengen visa. So I really don't know who these trains are for right now, besides like 5 people I know who did that exact thing above.
If MongoDB Atlas cloud services are affected it will be reported here:

https://status.cloud.mongodb.com/
Christianity has just unfashionable since the 18th c. in the Latin West, that's all there is to it. All the more so dubious Oriental Christianity.
Meanwhile, at Tether HQ...
The only thing I enforce structure on are my photos, which go in C:\photos\source\yyyy\yyyymmdd\

The camera makes a new folder every time the image number rolls back to 0000, or 1000 photos are taken... those subfolders get moved into the above folder.

I never edit a photo, I always work on a copy. The last time I edited a photo directly, I downsampled the best photo I ever made of a friend by 1/4, and couldn't recover it. It's been decades since that day, and that mistake, and that new rule, and he's since passed. It's a lesson I'll never forget.

---

Programming projects get a folder on C:\, and I copy the .gitignore from y last project to exclude a ton of crud from the repo. Everything gets pushed to github, private or public depending on the nature of the code.

---

Additionally I back up everything to backblaze because it's saved my bacon a few times already.
It was a self-fulfilling prophecy. If anti-vaxxers would not have been declared a threat to humanity and health, you can expect that overall rates would be much higher than they are now. Instead people made really bad arguments and people refused on principle. Suggestion for mandates will do the rest and probably will negatively affect uptake for decades. It is a very predictive behavior.
I've seen organizations that have hundreds of developers organized in 5-10 man teams, each managing their microservice. I think it tends to happen when a large organization decides to get down with the kids and start to do microservices.

Conway's law enters into it in a lot of ways. Because of the way the people are organized into tiny isolated teams, the code shares that shape too. There is an event horizon one team/service away, beyond which nobody knows what happens or who wrote the code.

What you get is that the services actually don't do that much, except take a request from one service, translate it to an internal format, perform some trivial operation, then translate it to another external format and pass it on to another service. It's a lot of code, but it's not a lot of logic. Add to that maintaining the test and prod environments as code, and suddenly it looks like this is a lot of work, but you've essentially gotten a hundred people to do work that three people could probably accomplish if it wasn't for this pathological misapplication of an architectural pattern.
I'm so split on Reddit. While I agree with most of what you said the decline in quality of both content and comments, and the extreme moderation which has occurred over the last 4-5 years would really worry me if I was an investor. Presumably as a public company they would come under even more scrutiny for edgy content and feel the need to moderate content even more. And in general as the size of a social site's user base increases, the quality of the content drops as content starts to reflect the common denominator of its users.

I also feel like all social media the there are very toxic aspects to Reddit. I used to be very active on there, but after receiving constant abuse and very few constructive replies I now rarely participate in discussions there. Again with the company going public like Facebook and Twitter, Reddit could come under more scrutiny for this.

Assuming you buy for a fair valuation I don't think it's a bad investment per say, but I think there are a lot of risks there. I find myself wishing for an alternative to Reddit a lot these days because I really miss the high quality discussions I used to have there 10 or so years ago.
I had the older version of the app which did not support import export.

But yes I should have tested these things before relying on the automation.
If I remember correctly, in F#, all methods are generic unless you say otherwise, while in C#, you have to make it as such specifically. Also there's things, like you can't do generic operator overloading, but in practice C#'s type inference is good enough that you don't need to manually insert the types most of the time.

You can write stuff like
var totalLength = Strings.Select(x=>x.Length).Sum();
in practice, where everything is generic, yet you don't need to specify the types explicitly.

Having to specify function argument types, and return is a design choice - I think it makes the code more readable than having to figure it out on your own, but I see the appeal of the other approach as well.

To summarize, in some ways F# is better than C#, however for most of these things, the difference is not large enough to matter. I realize that this is not a fair comparison as far more work and attention was spent on C#, but still it is what it is.
> But automatic lets you pay more attention to the road ahead, whether you are a new or experienced driver.

In my experience, drivers who primarily drive an automatic are easily distracted from the task of driving. They turn around to their children, fiddle with the radio or climate control, I've even seen many adjust their seating position and steering wheel position while in motion. Not to mention the internet-connected smartphone calling them incessantly, which is propped up close to eye level and blocking part of the windscreen.

Contrast to manual drivers, who will happily drive along without music. Far less prone to distractions and far less likely to touch the phone.

One could argue that the focused people who enjoy driving do prefer a manual transmission, to which I'll agree, but I'll counter that the manual transmission itself fosters that focus and enjoyment in the driving experience. The boring automatic is what invites distraction and does not foster enjoyment in the driving experience.
For monitoring I’d also say the alerting side of things can be done via the older monolith. That is, catch exceptions and log/re-raise them as “PdfServiceException”.
Mussolini got the trains running on thyme.
Gentrification changes the personality make-up of cities in just a few years
Webinar: How to localize your app and drive app store optimization strategy
You can’t disable the banning of a community.
He's probably talking about https://justine.lol/dox/ansic-identifiers.txt I'm not sure what he wants to see happen here but I remember him asking me for a timing safe memcmp function in Cosmopolitan a while back and it's hard to refuse a small reasonable demand.
Awesome! That performs really well!
I actually love chasing down other people's bugs. I often get to fix other developers new shiny features shortly after they've hit production. And I love the challenge.

It's also nice that bug chasing has less of an expectation of giving good times estimates, which the software industry is famously poor at anyway.
They get value from the users.
Python's csv imports _csv for core functionality, which is C: https://github.com/python/cpython/blob/main/Modules/_csv.c
Sounds about right.

I like how you tested "query multiple vectors at once". Super useful when documents can be batched, for increased throughput. If I'm reading your benchmark correctly, Faiss brute-force can do a batch query of 10,000 vectors in ~19 seconds => 1.9 ms per vector.

That's pretty cool – and more than 130x faster than querying those 10,000 vectors individually, one by one.
Example of decoupling things in goblins framework (nodejs):

one domain give one package/module, domains are now dependencies

actors models can act as services, one actor in a domain is a service with an API communicating with other trought event loops or tcp/ip (microservice?)

we can develop and debug the whole system in a mono-repo <- the monolith is the repository of code.
You can search by date with Pushshift, and I built in a UI for that on reveddit [1]. Just visit a subreddit page and select a date under filters.

[1] https://www.reveddit.com
It would be a breakthrough if this works since that would basically make almost all forms of cancer treatable.
This Year’s ‘Anti-Piracy Award’ Goes to the EU Intellectual Property Office
Some context that is missing in the article: this university has about 4000 students. [1]

So those 4 suicides this year represent 0.1% of the student population. For comparison, the suicide rate for the Indian population in general is closer to 0.01%. [2]

[1] https://en.wikipedia.org/wiki/Indian_Institute_of_Science

[2] https://en.wikipedia.org/wiki/Suicide_in_India
> "monorepo/monolith/microservices/etc" is -just- the way you organize your code

I don't think this is true.

I think — at least as far as I've observed — microservices in practice means replacing various functions calls with slow and error-prone network requests.

This is a big and meaningful difference.
This is true for all responsible people, the way I tackle this is to try and predict the future.

Recently I had to implement interpolation in my game engine, before looking at that I tried laying out animations in memory and noticed a 3x speedup. So when it was time to decide I took the seemingly coward route of exporting animations in 120 FPS instead, hitting disk ×5 and RAM ×2 but saving CPU ×3.

Time will tell if this was the right choice, ie. will games render at >120FPS. The debt was moved from technical to energy saving, from complex to simple, from now to the future (since exporting in 120 FPS takes a little more time every animation that goes into the game)

I'm going to keep investing in low power because that is more guaranteed than everything else.
Most people I know want a house in the suburbs. Their own land. A place for pets, a garage for cars, no shared walls so they can watch tv loud or play things like rockband (old reference but clearly not something most people can play in an apartment). they like their suburban neighborhoods where they get to know their neighbors and their kids can play with other kids in their front yard, etc....

no need for evil corps for this lifestyle to be appealing to lots of people
Crowdfunding platform Kickstarter planning move to blockchain
Also useful when you want to try strange or unusual openings without ruining your rating
Michael Feathers uses several definitions of legacy code, depending on the situation. In your situation, he defines legacy code as follows.

"legacy code is the product of ... when your team turns over faster than your code turns over." [1]

1. https://www.software-engineering-unlocked.com/legacy-code-mi...
Would it be possible to cp /var/lib/your-database /var/lib/your-database-clean after it's been set up, then after each test just overwrite /var/lib/your-database again? I'm sure that the database will need to be properly shut down and restarted, but that is far less expensive than rebuilding a large database each time.

Disk is cheap. CPU and memory are the expensive assets.
Hydraulic Fracking for Oil Extraction Can Trigger an All-New Type of Earthquake
Except when the team division in the company does not map to any natural service API boundaries, yet it is insisted that each "team" own their services.

Then microservices increase organizational complexity too.

Suddenly product owners and middle management are chief architects without even knowing it.
Well, a simple solution is to only have one middleware that uses database connections, and have all other things around it be purely functional. (Though that may mean using their own databases, of course).
Please see my other response: https://news.ycombinator.com/item?id=29576981

As a summary, generating content isn't new and just increases your moderation load. AI is not something "special". It's just software, at the end.
Progressive Microservices Framework for Node.js