skysight-inc/HackerNews huggingface dataset:
Obviously I don’t know much about the normal git process (the one I use is a little unusual) but what is the alternative to auto-merging PRs? Do people need to manually hit merge once tests are automatically run and code reviewed or is there some smaller set of people with the ability to merge? Do people ever do code review after a merge to make sure it worked properly?
> As a non-American, it's heartbreaking to see efforts to unify the underclass completely derailed by this ridiculous race war.

Yeah, well, it's not like things are much better in Europe. Far-right parties are now mainstream in most major EU countries, and their n.1 priority is exactly the same.

Signed,

a Brexit victim.
> with personalisation of search results

There is not much personalization on Google except on your location, which is not going to help you have more relevant results as a doctor
An interesting idea, and maybe a good one.

One side effect? Societal harm by tech companies these days, far outweighs the opid crisis.

So, will insurance end up affecting us too? And Google, Facebook can pay. But what about the little startup, trying to grow, 2 guys in a garage, but now they need insurance?

I suppose it could only be a requirement once at $x size...
Try nimgrep: https://nim-lang.org/docs/nimgrep.html

If you install Nim with choosenim[+], nimgrep will be available in ~/.nimble/bin along with the compiler, nimble, and some other helpful executables.

[+] https://github.com/dom96/choosenim#readme
Crack C programming interview questions
Of the current crop of new(ish) systems languages, it’s the one that feels most fun to me. It reminds me of Ruby, not necessarily technically (obviously there’s Crystal for that), but in the sense that it’s a breath of fresh air coming from more austere languages.

I wouldn’t make a career or company bet on it (compared to Rust which I think is a very sensible choice) but I’m always keen to noodle away at new hobby projects in Nim.
> is being called slightly rightwing in the EU

That's simply not true.

> Bernie‘s ideas would be called leftist here

Where is "here"? How is "financial transaction tax" a mainstream idea in europe?
But it's not on the internet permanently, it will disappear eventually at an unknown point in the future, like a dead torrent due to the lack of seeders.
Capture traffic and sue the f outta everything they do that‘s not covered by a contract.

Someone has to start stopping this madness and protect less informed people.
We are all steering into a dark future. And i lose hope when i see all these smart programmers complaining but not stepping up.
I think the things I raised are problems independent of scale. Amazon deemphasizes the merchant and wants to own the shopper relationship, then turned around and tried to claim that they're not liable for the goods they sell.

https://www.pbs.org/wgbh/frontline/article/whos-liable-for-d...
This is not an antivaxx problem, this is a government/NGO ineptitude & trustworthiness problem. There's been a million fumbles and lies around the whole pandemic, making the quasistalinist approach to pandemic governance likely the number one catalyst of antivaxx stances.
I miss the days when people were better educated in civics.

You are right, people talk about guns as protection against state tyrany, but they forget that the reason it works as protection against the state is because the person bringing violence against the state is willing to become a martyr.

The more the state pays in blood, the more it looses it legitimacy.
I think GitFlow is helpful for mobile apps development. We cannot get into production every time we want, we are at mercy of app store review process. Also, if there is a bug in production it is very difficult to get a fix for all users once a version is deployed. I wonder if anyone uses successfully Trunk-based development for mobile apps development and if you could share your experience against GitFlow (pros and cons)
Yep, exactly. I used to put client devices on a segregated network and tunnel their traffic out to pfSense running on a cheap cloud box somewhere. Worked well.

(I should say that intentional monitoring of my private comms was never a concern for me when I freelanced, but I was somewhat worried about infections in my clients' devices moving laterally to my home network.)
other interesting activities going on currently in the nim space:

- advent of nim (advent of code with nim): https://forum.nim-lang.org/t/8657#56695

- call for participation to FOSDEM: https://forum.nim-lang.org/t/8671
thanks for the reply!

which is better for building complex systems?
> performance like Rust

I've just looked at some benchmarks, and even though Nim claims C-like performance, that never seems to be confirmed by independent tests. It is usually a bit behind C / C++ / Rust / Crystal, and roughly on-par with Golang.

Fast enough for sure, but "half the speed of C" would be more honest it seems?
Ask HN: How important is it to have a mentor?
I never had a mentor during my years in the industry. So I am wondering is it really necessary to have a mentor for yourself as a developer/engineer?

How much is it going to affect one's career in the absence of a mentor?
I suspect you're not a real person but an archetype created by someone who is trying to create an interest in a surveillance product (Drata?). I joined this thread when there is over 800 comments already and 1349 points. So, it seems that your mission is accomplished. You've planted the seed of a lazy, overpaid developer exploiting his position and working remotely.

If in the chances I am wrong, please accept my apologies but the effect remains.
I made a PoC to replace our current ElasticSearch cluster with Clickhouse 20.10.
5x gains in space and 3x gains in QPS, without changing too much the schema model.
It's still in a PoC repo, priorities I guess..
Pork is a red meat BTW.
This. If "work [...] as a freelancer" means that you are not their employee, and they need the legal fiction that you normally have other 'clients' who you freelance for... If they do not provide the laptop, do they mind if your other clients also have agents & such on your machine?

If they are honest about this, then providing you with a nice laptop would be far cheaper than dealing with multiple-agent issues. Let alone getting into "how do we need to do this, to comply with laws & regulations?" conversations with lawyers. If they are not honest...
For card-linked offer constructs you can infer the issuer based on first 4 digits (bin number) and actually store last 4 digits and name on card.
I can see your point, but I’ve been working like this for 3 years and my anecdotal evidence is that kind of thing simply doesn’t happen.
I always liked to game and even with running everything on Medium or Low I needed to upgrade my PC every 3-5 years. But now, my CPU is from 2012 and my video card is from 2017, and I'm fine.
Pretty sure that's because it's yearly inflation and March 2021 on that graph means inflation between March 2020 and March 2021, and corona "started" then.
>it is the West who creates this situation.

It is the West that creates this situation:

https://www.geoawesomeness.com/wp-content/uploads/2017/01/Ri...

>Britains deal with Hitler. A deal with Russia

These are not equivalent by any stretch. Putin is not Hitler.
> Rights should not be thought of in terms of their financial cost.

Agree!
My employers automatically corrects for inflation at the end of each year. Of course it's still 'behind the curve', since inflation happening this year is only compensated next year, but it's still something.

Pro-tip, if you have yearly performance/raise/bonus discussions, let your manager tell you all of the nice things to justify why they are giving you a raise. Dig into it, be super grateful and receptive. Then ask "oh of course this is in addition to an inflation compensation, right?"

If not, it's appropriate to be genuinely confused about why you're actually not getting a raise at all given his/her stated reasons why you are deserving of one.
Laptops are not that expensive any more - maybe you could dedicate one to that client?
There is some logic as to why that is. Here [1] is an explanation for why it makes sense but the tldr is that you don't want to be manually importing functions such as `$` and `+`. In languages like Python, those are defined as methods on the object being imported (e.g. `.__str__()`) so they come along for free. Not so in Nim. If there's a conflict (same name, same signature), the compiler will warn you but it's extremely rare.

[1] https://narimiran.github.io/2019/07/01/nim-import.html
Which vaccine was it?
Glad this was the top comment.

Wages have not kept up with cost of living for 50 years in the US.

We need to stop pretending flat wages are some modern problem of inflation, and we need to stop pretending inflation is some problem caused by the pandemic.
A middle ground solution may be to use virtual machine on your computer or e.g. ask for access to AWS Workspace under their control.

The customer provided me an image with all necessary licensed software I need to use to provide the service, including software to connect to their production infra via VPN and encrypted filesystem. They don't have access to camera, mic, my private system or LAN (use NAT mode). Clipboard sharing is set with guest to host direction only. I can filter out any call home stuff I don't like on my router unless it goes thru their VPN. I Zoom them with my host system, then do screen-sharing of virtual machine window only.

In my opinion separating customer gigs with VMs in general is a safe way to prevent accidental cross-customer data leak. Of course it depends on kind of work you do and software you use, however personal licenses often allow to use software on multiple devices by the same person.
> amazing telling of the background

I'd also like to recommend HBO's 'The Crime of the Century' documentary. It's a two part docu and was directed by Alex Gibney (who won an Emmy and an Oscar). [1] Trailer is available [2]. It details the whole opioid crisis and the role of Purdue and Sacklers.

[1] https://www.hbo.com/documentaries/the-crime-of-the-century

[2] https://www.youtube.com/watch?v=SkU75sBdjdU
If they own the laptop, they can request you to install anything they want on it, including spyware.

If it's your own laptop, you don't have to do that. That's yours, not their property. They can provide you with one configured as they request, or provide it and ask you to configure it that way. Or you could set up a VM for it.

Corporate spyware is kinda common nowadays. It's mildly annoying but mostly unlikely to be a problem in many/most places. Mostly just there to deal with problem situations.

And you mention that your client wants SOC 2 certification - chances are they'll never actually bother hiring someone to watch what you do on your computer, they just want to be able to check off a box on a form that says "yeah we do this, and all our employees have this thing installed, so we have central control of our data." to get the certification. Because that's what it's about. But also it's just bureaucracy, and probably just checking that box is all they care about so they can tell their clients/customers that their solution is officially certified safe. A lot o' stuff like that is driven by, and ultimately, just feature checklists.
the problem is also that sellers can claim a product is their own and take over the listing when it's not
Seems like it could be fraudulent conveyance [0], but generally conviction only results in civil penalties.

[0]: https://www.investopedia.com/terms/f/fraudulentconveyance.as...
Why compare the “standard raise” with inflation when you could compare it with the CEO’s total comp? Is the ratio of CEO-to-employee pay competitive? Has the company’s pandemic response increased or decreased this ratio? How about comparing employees versus the comp awarded to the board or other investors?

Tell HR and the C-levels that the employees are making a big investment of themselves at the company. Shape the dialog such that the leadership has to recognize the employees as investors, not cogs.
>It allows programmers to mostly use their own preferred spelling style, be it humpStyle or snake_style

It's interesting that some languages, like Go, are specifically designed to avoid it (there's a built-in formatting tool for a single coding convention), while in other languages having a zoo of different styles is viewed as a great idea and the language is designed for it. Or is it about linking with existing C libraries? In that case, I'd introduce some sort of name mapping via attributes/annotations as a whitelist, instead of allowing this behavior by default.
Most of the collective bargaining agreements I've heard about here in the Netherlands involve an automatic inflation correction at the end of the year.
Since you are in the EU, have you asked them if they have confirmed with their DPO that the suggested data collection and processing is GDPR compliant?
Flow Metrics: Measure Software Value Streams
Right, so what's happening right now is much more akin to the early days of the internet than anything else IMO. In the same ways we couldn't have ever predicted Facebook, Google, iPhones, etc, in the 90s it's hard to say exactly what impact crypto/web3 will have on the modern world.

There's actually something truly new and tangible that crypto has spurred - the ability to drive consensus in a trustless manner automatically and the ability to execute computer programs that are deterministic, immutable, and will run forever. With those new tools in the global toolbox I suspect that some iteration of them will be in use somewhere in our future, but no-one exactly where. Are NFT game assets the ultimate expression of crypto? No, but Friendster and HotOrNot weren't the ultimate expression of the internet either.

The ability to network 2 computers together was also new and tangible thing that the internet as a concept brought, but it wasn't before a huge amount of foundational work in the form of IETF protocols, router hardware design & production, software network stacks, and wireless communications before it really took off. Mass adoption was one of the last phases, and I still remember a day when people would call you crazy for putting your credit card anywhere near the internet.

IMO that's the phase we're at, so for most people it's just not ready yet, but it doesn't mean that there aren't a lot of people out there trying new and novel things with these tools ¯\_(ツ)_/¯.
NATO is a military alliance, and it is therefore even more dangerous to have it flying armed nuclear weapons close to Russia's borders than if it were an individual country doing it.

NATO is the threat that Russia is responding to by buffering its borders and protecting its nuclear-armed naval base on Crimea. Its not Russia putting American bombs within strike distance - its the USA and its criminal NATO partners.
Make your client provide a laptop, simple as that. Make him send you a laptop or cover the cost upfront for a new laptop where he can install all the spyware he wants.
If they got promoted at their new company then you can counter offer with a promotion too?
> Do you work at my company?

Maybe. But I only get paid in whatever snacks I can scrounge from the employee fridge and pickings have been slim of late since so few people come into the office these days. I am down to the "expired mystery mozzarella cheese sticks" and the leftover ketchup packages from Woodranch BBQ & Grill that are in the drawer with all the unused chopsticks and plastic forks.

I too spoke to a friend at Google that is part of the team, and whilst he said there were no plans to cancel it, or make radical changes, when I asked about unplanned plans, he kinda just shrugged and said "You know Google..."

I have a dual solution approach, Mediapipe for "in use now" and OpenPose for validation, slower processing and the "Google just **ed us" moment we're both anticipating. I need to build my own pose analysis system, but right now I don't have the bandwidth.

On the last day of Christmas the CEO sent to me:

Thirty-two Manfrotto Tripod extenders

Sixteen Manfrotto tripods

Sixteen high speed cables

Sixteen Manfrotto C-clamps

Sixteen Manfrotto 3/8 to 1/4-20 reducers

Sixteen Quick release mounts

Sixteen 4K cameras

Fooouuuurrrrr high-speeeeeed PCIe capture cards

Three days to hit deadline

Two triggered circuit breakers

One really huge headache

And a new VR H.M.D.
Could you elaborate? Why is the interest rate cycle good?
> If you want to ship me a dedicated laptop for your engagement, I would be happy to install whatever you want on it.

I wouldn't offer this. You're still going to need to login to Github/email/wherever with your personal password, manage private keys, and stuff like that. Just say no.
Bernie isn’t the elite running the country.
Yes, a good middle ground is the slightly confusingly named “GitHub flow”: https://docs.github.com/en/get-started/quickstart/github-flo...

The main branch is always stable, releasable. Feature branches are branches off main, which are then merged back into main. No develop or release branches.

It is like trunk based development, especially if branches are kept short and regularly rebased onto origin/main, but with a point to run PR checks before merging.
Does this turnover mean that the truckers get better paid? If not, then it's an even better example, because the turnover would highlight that they have topped out.
To add to this, which at least in the systems I'm aware of, being a GP is a specialisation. General doesn't mean non specialist. It means being a specialist at general medicine.
For notebook I am using tqdm.notebook[0]. Works quite well for me.

[0] https://tqdm.github.io/docs/notebook/
The first bad sector I encountered in the 90s left me shaken for days. We stared eye to eye. The bad sector won. I had broken something my father worked a month for. But it didn't break. The bad sector was marked bad. The computer continued working. I rejoiced.
Another reminder: food was far more expensive then, they had food shortages, and a significant portion of the population could barely afford to eat. It is certainly not worse right now.
It's called piercing the corporate veil.
Get-there-itis is a real problem.
I tend to feel this is true. If anything this study shows that for many people the efforts they put into living longer via steering their diet might not pan out in the long run as other factors probably have more effect.
They don't program humans, they maintain or repair them, help them to cope and soothe them.
The system they're working on doesn't change that fast biological, albeit a bit faster social.
The main components are millions of years old.
Methods and tools do change over their career a lot, but not that fast.

Administrative regulations, now that changes really fast.
At least in my jurisdiction.
But thank God, the problems stay the same.

Beside, they google all the time.
They don't rely on it, the way programmers may do, but it's much faster than consulting their professional networks and data sources.

Of course it depends a lot on their professional area.
This is country-dependent. In practice though, it's absolutely true that GP is specialist work.
The author falls into the trap of viewing the internet as the same monolith they were used to when they were younger. In fact it was a mass of subcultures back then as it is now, just far larger and more varied now.

They had tunnel vision then when they found the memes they readily interacted with funny, and now, older, more cynical, in a smaller subculture, they find the vocal minorities of the million other subcultures, that are easier than ever to be exposed to, more annoying.

Part of it is that they're older, part of it is that the different generations find different things funny, part of it is that younger people who haven't seen the old jokes DO find them funny all over again, part of it is not realising that a popular community on the web making a new popular meme =/= universal hilarity.

They're being shortsighted and grouchy, like humans are prone to do as they age because they expected norms to remain static, and can't see the bigger picture. There are still plenty of subjectively funny memes out there for the author, more than there ever were in fact. They're just getting hung up on everything else because it's a way to gain prestige amongst like-minded grouches.
haha...true, time to fire up all the distcc machines ;)
them leaving put millions of dollars of revenue at risk

Every team should fight against this. Writing simple, understandable, documented code that doesn't need some key person to maintain it is a very good thing. For a start, failing to do that locks people in to their job. Not being able to move on, and up, is a very bad thing. Secondly, people leave for reasons other than money. What if someone's husband gets a cool job in another state and they move for that? No amount of money would keep them, so you still lose those millions. Thirdly, there's the bus factor - what if that person is run over by a bus? How do you keep going?

Paying someone more and more to keep them is only patching the underlying problem that your team isn't resilient enough to catastrophic change. Fix that problem.
Yeah, recently I wanted a second charger for my thinkpad. I ended up just buying it on lenovo.com, because I had 0 faith in actually getting a real product from amazon, especially in that category
He hasn't spent 8 years searching a landfill.

He's spent 8 years trying to get permission to search a landfill.
Unsuccessfully...
As a programmer, I have a trivial way of finding out if a solution I found on the internet really works: run it. What is the equivalent procedure for doctors?
I like PC’s for power users. If we dumb down the PC, the people using it get dumber too.

But I don’t know. 7 year old me could figure out the classic control panel. I don’t think it was that hard.
Seen this a lot on the internet lately. Usually followed by some crazy extrapolation along the lines of allow the small restrictions and before you know it bam fascism
If you read Friedrich Engels's The Condition of the Working Class in England, you'll see how capital works. It is the LAW of the capital, not an arbitrary decision: http://www.theinternationalism.org/2021/06/engels-in-new-cen...
I’m sure some time from now a different government won’t try to “counteract” some other threat with even more draconian measures. And it definitely can’t be the other side targeted next time. There’s nothing dangerous in giving unchecked power to the government to counteract “threats”.
Log4Shell Update: Full bypass found in log4j 2.15.0, enabling RCE again
We couldn't figure out the actual network bypass for this one, so it's not included in the post (even though it's in the CVE). It's gotta be in this function[0] though, and if you have any notes we'd appreciate if you shared any notes with us! Edit: I spoke too soon! As we were writing this, somebody on Twitter figured it out[2].

Also, we just released v1.4 of the Log4Shell CLI tool for detecting + patching this vuln. Feel free to check that out on GitHub[1]. It's got a ton of improvements from the last release.

0: https://github.com/apache/logging-log4j2/blob/master/log4j-c...

1: https://github.com/lunasec-io/lunasec/releases/

2: https://twitter.com/marcioalm/status/1471740771581652995
> Maybe you’ll have to throw away an entire IT system because you’ve lost the know how to keep the business case for the system a net positive, but that means a lot less to an organisation (especially enterprise) that we tend to fool ourselves into believing myself included.

You are comparing throwing away an entire IT system to increasing the salary of _one_ employee.
There isn't one single type of union with one set of rules. Do Hollywood actors get paid by seniority?
Eliminating competition...