skysight-inc/HackerNews huggingface dataset:
On the point about technology lock I've thought that the move to microservices would mean allowing different programming languages, but whenever I've asked existing companies if they would be open to other languages it's usually a no. Part of it seems to be decent enough reasons but I usually think they could be overcome with a reasonable amount of work where the tradeoff may be worth it. I usually suspect it's more social reasons. My company also made the move to microservices and I was able to use another programming language but there was strong social pressure to conform.
I'll never buy another Ledger product.

I got doxxed in their data leak(s):
https://www.google.com/search?q=ledger+data+leak

In hindsight, I should've known better than to use PII at the time of purchase.
> Then you should easily be able to back that up with data. So please provide it.
I had the same thought. However, I think it's a more generic attack. If you can persist or inject the jdni strings, there's a chance they will be emitted by another component which analyzes the logs and has a log4j dependency elsewhere in the stack.

I've heard people talk about this problem with analyzing windows event logs using Java-based software.
> Can you provide an example
I respect that and may Python and Django work for you forever, but some of those sound like what cat people would say about dogs and vice-versa.
What Does It Mean for AI to Understand?
I’m also a low level player but I fundamentally don’t understand the chess culture of “gentlemanly” concession. It’s a game you’re playing to win and even at the highest levels players can and do make mistakes. It’s not over until it’s over. When you compete you play through the whistle. You run past the finish line. You keep throwing towards the endzone even when it’s 28-3 and things are looking pretty bleak.
Devil's advocate: it's probably not due to the "download apple music" button and more to do with the tagline that came with it: "Millions of songs. All ad-free. New users can get upto 3 months free.".
Open Source Tips
Japan draws a LINE: Web giants must reveal where they store user data
Show HN: Metaphysical NFTs for the Metaverse
I took a metaphysical approach to the metaverse, and out came Commvnion. The "art" if you will exists as a collective whole, and less just as individual NFTs (which is why I'm linking you to the main website). https://commvnion.com/

I had a lot of fun engaging with NFTs in a way that made sense to me, I hope you enjoy it.
ERP as in Enterprise Resource Planning?

My bet is that it becomes like what Clubhouse is now: a home for all kinds of whackjobs, hustle culture bros, "become wealthy" gurus and recruitment channels for MLMs and political extremists.
The fact that you think GW places us at imminent risk of starvation suggests you're probably not operating on a coherent model of GW risks.

Are you willing to put money on the table? Make me a market about a measurable GW-related food production loss and I'll probably take you up on it, assuming you're willing to commit to it.
Many of these points you're mentioning is exactly why k8s was developed. Yes it makes deploying simple applications unnecessary hard, but it make deploying more complicated applications WAY more manageable.

So in the k8s world:

- auth: service meshes, network policies, ...

- monitoring: tons of tooling there to streamline that

- deploy: this at scale is trickier than you'd think, many seem to assume k8s on it's own here is the magic dust they need. But GitOps with ArgoCD + helm has worked pretty well at scale in my experience.

- Security is a CI problem, and you have that with every single language, not just Go. See Log4j.

Kubernetes is my bread & butter, but I do realise this has way too much overhead for small applications. However, once you reach a certain scale, it solves many of the really really hard problems by streamlining how you look at applications from an infrastructure and deployment side of things. But yes - you need dedicated people who understand k8s and know what the hell they're doing - and that's in my experience a challenge on it's own.

Let's also dispel a myth that k8s is only suitable for microservices. I have clients that are running completely separate monolith applications on k8s, but enough of those that managing them 'the old way' became very challenging, and moving these to k8s in the end simplified thing. But getting there was a very painful process.
Often I question why actual land is valuable. Why would you buy an office in a tower in the middle of traffic jam central? Housing around it is expensive. Food is expensive there too. Why not make offices in some out of town area with good rail access?

They make offices downtown because it's next to other major offices. There's an element of wasteful pride, the kind that comes with buying a Ferrari.
That is a common social media criticism, "amplify and profit from toxicity". I find the charge vaucous for several reasons.

1. "Give what the numbers say you want." or "Maximize profit * area of instance." are what they actually want. Even if it leads to emergent antisocial behavior it is set by results instead of a goal in itself.
2. The charge itself could be applied to any form of media, and yet there is a blatant double standard. If one accused three letter network of it you would get a response of "well duh"!
3. The implicit idea that negativity is a bad thing is outright dangerous, yet clearly promoted by the accusatory tone. Publishing government misconduct also promotes negativity and a publication may profit from it. So does speaking out against injustice. Crude and callous as it may sound, maybe some outright deserve the negativity.
> Here, then, is the problem: People who are unlikely to be hospitalized by Omicron might still feel reasonably protected, but they can spread the virus to those who are more vulnerable, quickly enough to seriously batter an already collapsing health-care system that will then struggle to care for anyone—vaccinated, boosted, or otherwise. The collective threat is substantially greater than the individual one. And the U.S. is ill-poised to meet it.

Of all the factors at play, this one seems the least appreciated. I don't think the country or the world is ready for the implications of mass vaccination actually promoting the spread of virus. Nor is the world ready for restrictions of movement that would inevitably follow from realizing that movements of the vaccinated risks spread and the knock-on effect of pushing already stretched hospitals past capacity.
This is just fearmongering based on XIX century thinking. There is no expansion drive by default, however there are couple strategic "red lines", which, when crossed make Russia react aggressively.

1. Hostile military block on the borders (expansion of NATO or any moves that may be treated as towards the expansion or challenging the status quo, as in Ukraine with Crimea).

2. Status of Russian population and Russian language (Georgia in 2008, Ukraine - Donbass, Baltics - low intensity information war).

For the neighboring states they are the keys to their own security: addressing those fears of Russia by diplomatic means, those countries can bring more peace than arming themselves against the invasion.
>It is outright ridiculous ( even malicious) to point to examples of bugs that were found _by 3rd party users reviewing the code_ as evidence of lack of 3rd party code review.

Those "bugs" were found by third party hackers reviewing the code. Heartbleed was found by someone conducting a blackbox pentest. Log4shell was found by someone reviewing the code, and using the exploit before white hats discovered it as a 0-day. This is the exact opposite of championing open source white hats, and is exactly the concern raised by the original author of the statement which created this entire thread.

>However, try to find evidence of issues found by a 3rd party reviewing a closed crypto system .

I can speak from personal experience at a FAANG that this happens literally every day, multiple times a day. Just because you don't hear about it happening because its behind closed doors does not mean it isn't happening.

>There is a literal objective benefit to having an open system

And there is literal objective disadvantage to having an open system, as well. The entire point is that you must weigh the tradeoffs.

>why every engineer worth its salt is nowadays going to consider a closed crypto system as the snake oil it is.

The majority of software you use is using closed crypto systems. Just because the core algorithm used is open source doesn't mean the rest of the implementation is. The security industry does not view this as snake oil. If you think we do, you have a misunderstanding of the security industry.

>This is also missing the point. What is meant here is that a crypto system should not rely on obscurity of its design (rather, the design should be open for cryptonanalysis), not that you have to provide friggin debug- level access to every implementation of the system, even production.

It seems like you're the one that completely missed the point. Relying on third party cryptanalysis for your security goals (especially by unpaid volunteers, or low-paid bounty hunters) is terrible and lazy security, and will almost certainly not get you what you want. The design of a crypto wallet being open is a product decision made because your users want some level of assurance that you aren't secretly stealing their BTC, but it is not a security decision that can be relied on to secure your product from vulnerabilities.
There's plenty of companies that are distributed across countries. On my team I have teammates in Macedonia, Costa Rica, USA, and Germany. Even without Covid restrictions, that's going to be expensive and time consuming for us to meet in person.
1. You can absolutely blame Russia. When the nukes were taken away, new launch facilities were dismembered, and TU-160s (Jet strategic bombers, very large ones, which are always a serious threat for people who don't know) were cut OR TRANSFERRED to Russia. Russia knew exactly what it was doing.

2. Hitting Moscow from across the border with a real late 80s ICBM isn't exactly complicated for a country like Ukraine. Especially in this day and age. You drastically overstate the role of centralized C&C here. I want to stress that Ukraine demilitarized MODERN facilities. These aren't 60s hold overs.

The West, of course, lied too. That doesn't absolve Russia however.
I would assume he is talking about the US. I would think computer parts are also more expensive in Estonia, not just PS5
Comparing a language like node to a framework like rails is like comparing a language like C++ to a database like H2 they both have different goals and use cases.

Sure you can build a database like H2 in C++ and yes doing so will take ages which I think is why most people don't do that and just use MySQL instead of reinventing the wheel. Does this mean we should switch from C++ to H2? Obviously not, what am I missing?

Wouldn't a more useful comparison be something like Node vs Ruby or Rails vs Sails
Removing them for that doesn't make any more sense than the "download apple music" button.
Testing django with pytest is super easy (ex: https://dev.to/sherlockcodes/pytest-with-django-rest-framewo...)
Supabase (or similar) is going to change all of this very soon. I can't wait for open source technologies like postgrest and typescript RPC to mature. No more boilerplate HTTP code, no more boilerplate database endpoints. Need a backend function? Just define the interface, and boom you are writing backend code that you can call directly from your frontend. Really really exciting stuff is right around the corner IMO.
Thanks for the feedback, you two! Know of any that are all-metal, but not perforated?
What I "really want to be true" is irrelevant, we have to engage with the world as it is, not as we wish it to be. Plans are better if they are based on reality, not on our "bet".
Because there is no newly invented architecture called "modular monolith" - monolith was always supposed to be MODULAR from the start.

Micro services were not an answer to monolith being bad. Something somewhere went really wrong with people's understanding and there is bunch of totally wrong ideas.

That is also maybe because a lot of people did not knew they were supposed to make modules in their code and loads of monoliths ended up being spaghetti code just like now lots of micro service architectures end up with everything depending on everything.
I think learning new things is always good, if anything I have worked along the years primarily with Symfony/PHP, but as a freelance you try to get projects regardless of tech stack, I've worked on projects using ASP.NET MVC, Phoenix, I've done iOS with ObjC/CocoaTouch back in the days, or Django, and I have the impression that being exposed to different kind of solutions is always enriching and you can bring back to your main stack some fresh ideas/approaches
Are you sure you don't want to veer into /r/popular.

/r/Askwomen: What are 100% effective ways at turning you on?

/r/Teenagers: Every1 who wears their PJs to bed, I'll tell you your favourite band.

/r/ <<literally every subreddit>>: I HAVE A CAT, NAME IT FOR ME.

/r/NoStupidQuestions: If a woman shakes my hand is that code for sex?

/r/Askmen: What's your one perfect way to get a girlfriend?

/r/Pics: Here's 10,000 photos of people being gross on airplanes, what's something passive aggressive that I can do instead of just asking them to stop?

/r/Antiwork: I donated my heart to my boss and he fired me

/r/TooAfraidtoask: How to get girlfriend????

/r/explainlikeimfive: Do girls get horny too? how?
...which everybody does. There is nothing special about that particular smart person's ability to predict the future. Appeals to authority based on selectively chosen past performance... let's see how this ages 10 years from now.
There is a sculpture honouring the Lemmings in Dundee, Scotland:

https://www.atlasobscura.com/places/lemmings-statue

OpenStreetMap: https://www.openstreetmap.org/node/2762662126
Covid and the Holidays
> Reddit is the ONLY place on the Internet where you can simultaneously watch garbage recycled content from TikTok and visit extremely-niche and highly knowledgeable communities in the same session.

For now. Just watch what happens to it under constant pressure from Wall Street to grow and grow and grow...
Disclaimer: I worked at Reddit prior to when ads were a major revenue source and left in 2018

Prior to ads and the current dark patterns you see on the site, Reddit primarily tried to monetize through Reddit Gold. It didn't work, and users never purchased it in any meaningful volume to keep the site afloat. So while you wouldn't give them money for the decisions they've made recently, they weren't making enough money when they were (ostensibly) making better decisions.

How would you go about solving this problem? It's a genuine question without snark - if social media companies are unable to stay sustainable through direct user funding, then they're going to look to ads or other sources eventually.
Yes that may be. The main case is still for me: is this an Ad for our app or is this just normal external service webview based login?

That’s the first time this is an issue after 4 years being on the Play Store and immediately they remove the whole app.
Nah I've lived all over the US (>1yr in CA, TX, NY, CT, MT, ID) and in several major metro areas (>1yr SF, SATX, ATX, NY) and east coast drivers are 1000% the absolute worst.

Most small town drivers also seem be better even in similarly adverse driving conditions (construction traffic, high speed, etc.) which I'm not really sure how to explain. Maybe more absolute miles is helpful?

But beyond that, even in metro areas, east coasters are especially terrible.
I just went to reply to you that it doesn’t mention comment flagging. But then I realized the flag button is apparently only there while typing a reply.
Highly Vaccinated South Korea Can’t Slow Down Covid-19
Funny, you're also right. Of course you can't do that weird hacky thing you could totally do in Ruby but maybe shouldn't.

I meant something more like "of course there's a function for that with the name you'd expect".
> An even wilder bet: Reddit can fit nicely into the metaverse (as a news outlet of sorts, on steroids) and even potentially minimize the need for Google Search.

Doing so will first require the Reddit team to develop a competent search engine. Searching Google or DDG with site:reddit.com is far better than native Reddit search for topics. The Camas Reddit search is what you need for a power search to find that one post that you swear you've read five years ago. Neither use case is well-served by the current search implementation on Reddit itself.
We aren't talking about nuclear weapons where you need extreme niche expertise and billion dollar labs to build one.

We're talking about stopping the proliferation of binary blobs banged out by college kids on their laptops. Good luck.
We don’t need everyone to upgrade Log4j, just enough for herd immunity
I don't understant what you mean here. Why would the passwords be less random?
Ask HN: Literate Programming 'In the Wild'?
Does anyone know of any companies using literate programming? What about open source libraries? It always seemed like a really appealing idea to me, but I've never encountered it in the wild.
The question is less about NATO deployments and more the will of NATO leadership to go to war with Russia over its more minor members.

I hate to say it but the Afghanistan withdrawal really showed what happens when Americans stop giving a shit, and they probably don't give that much of a shit about Latvia. Who's going to step into that gap for NATO? Poland recently ran a military exercise simulating a war with Russia that was, in the words of one of the Generals managing it, "worse than 1939". In the simulation the Polish forces held out for less than a week.

Meanwhile attempts for an ex-US EU military organization are little more than vague proposals, in part because the EU started out as a peace project and, frankly, much of Europe isn't used to seriously worrying about its military security (the most notable exceptions being France, the UK, Sweden and Finland, perhaps Greece but they have other issues). Some NATO members ran out of bombs during the freaking Libya campaign. They've been under the US umbrella for more than a generation, in some cases 2 or 3 generations.

Honestly I'm not sure Europe can fight these days. It certainly doesn't want to (and after the 20th century who can blame them?). Sure almost every European nation (Poland included) has some badass special forces. Too bad those won't be enough if Russia decides to act with impunity.
Where does this obsession with the external come from. Russia has the largest national landmass yet still they look outwards despite the many improvements that they could make internally. It's bizarre to me.
Hilarious. Make a whole console instead of an accessory...
kind off... but if i am reading this correctly, its more a backup than sync... and if its done "correctly" the other user wont have access to the data... ideally, all data would be encrypted at rest, so i backup my photos to a friends house and he backs up to mine, neither of us have access to the others data... sync thing does have something similar, but its not backup (if your sync folder gets crypto locked, your screwed since it will sync to the other end).
> Our contention is that shouldn't be possible.

Trust me, this will always be possible, "web3" or not. The proper solution here is maybe something federated like Matrix and definitely has to do with encouraging more people to self-host their own services, possible with "web1" tech.

I think it would serve this initiative a lot better if you just completely left the notion of currency, value, and markets _all_ the way out of it.

Focus on IPFS, IPNS, federation, BitTorrent, etc. if you want this to succeed. Leave money out of it. Money is invariably going to be loved by the winners and hated by the losers. It also makes it incredibly challenging to trust incumbents as they have everything-to-gain (and potentially alot-to-lose) by shilling that which increases the value of the coin they hold.
Well you've solved the immediate problem of having zero further opportunity to solve the underlying problem (because they're dead).

One point made in the linked article is that identifying risk in individuals isn't something we've found a good way to do. If we know who needs help, helping them is better than removing a fan. But we usually don't know who needs help, despite a variety of sensible-seeming approaches to figuring it out.

There's still an argument that aside from the individual level, we should address things at the societal level: what socioeconomic forces contribute to people being in tough situations where suicide seems like the only way out, and how can we change those socioeconomic forces?

That's a great question and a great place to focus our energy. And, while we're working on changing the world in bigger ways, we can make it a safer place.
I think Futhark[0] is close to that, no? Or what about Co-DFNS[1]?

[0]: https://futhark-lang.org/

[1]: https://github.com/Co-dfns/Co-dfns
My takeaway from this is that it’s extraordinarily important to try different tech stacks.

I’ve primarily worked as a Java dev for the past 20 years, but I’ve got significant time doing python and one non-trivial Rails app.

The funny thing is I’m most comfortable and I believe most productive in the Java ecosystem, but only because of the time spent working in other languages. Coming back to Java after python, one gets a better feel for what’s essential and what’s cruft. Similarly, when Rails first came out, it can’t be understated how revolutionary it was with respect to web development. Coming from the J2EE universe it was like the true essence of web development had been hidden from us with servlets, JSPs, wars and ears.

That being said - I’m happy being a Java - well JVM at least - developer. The ecosystem is alway changing and often improving, but I assure you it wouldn’t if not for the evolutionary pressures of things like JS & Node, Ruby & Rails and Python & Django.
Help developer build portfolio site on custom domain
I have build https://pfolio.me to help developer build portfolio site on your domain
IMO modern MATLAB with the right toolboxes is much more capable than Mathematica. Pricing is similar.
It's funny that at the same time the language evolved so things got much easier without any dependency.

Yes, almost every other language is still more productive, but all that tooling gives you less and less each year.
> Common among JS developers != common among programmers != common among professionals in the software industry

Not sure if you're a troll, but as I pointed out, as of 2019 over 1/3rd of all developers in the software industry were using it. It's higher now.

That's common. Find me another technology used by more developers in the software industry.
The authorities don't have any special secret knowledge here; they're responding to the (reasonably likely) possibility that it's as dangerous as Delta but will spread much more easily.

Honestly, given the rate of spread, even if it had half the hospitalization risk of Delta it's _still_ terrifying.