skysight-inc/HackerNews huggingface dataset:
Stross is writing as a UK-based author; obviously Brexit is having a worse effect than Covid on the UK economy.
even the founder sees the scam value in the scam crypto
There may be an arbitration agreement in their EULA, and that may allow them to settle this more cheaply than using lawyers.
The post you are replying to literally says in the first sentence "there could be other reasons", so it's clear why I reject the counter argument.
They were using extreme numbers to say that even then you barely hit 10x.

That's why the number they used for a living wage is so low too.
Show HN: alternatives for colors and faker
pkg.land (beta) is a website that help developers to find similar packages on NPM.

Here are the suggestions for colors and faker:

- https://pkg.land/package/colors

- https://pkg.land/package/faker
> (Apologies for slow load time: this blog runs on an ancient, slow Athlon box and this entry is currently being hammered by Hacker News readers.)

Much as I like Antipope, this looks like blaming others for something that is easily remedied.

I think his predictions on climate & politics are sound. I wonder if there is a listing of climate priorities for mitigation. Interrupting crops sounds like the top of the list.
Are you aware that GNU rhymes with "canoe" and is not pronounced like the animal gnu?
A Pantheon Experience for Fedora Silverblue
That's awesome. Don't discount your contribution just because it didn't make its way into the kernel. Published FOSS is great too. If you want to reach more users by default, you could ask Ubuntu or Red Hat to include it in their distros. Thanks for the work!
Crev looks interesting.

Most Linux distributions are using a single key for the signing of packages, and this might be an easier place to start changing over to a multiple signature model.

In this particular case is was a single jilted developer, but determined actor could easily attack someone with access to the keys to sign compromised packages, as per the obligatory xkcd on the matter https://xkcd.com/538/ .
Does updating it with junk take any longer?
>You can say that about any popular sub

Not really. There aren't too many opportunities to insert propaganda into cat pictures.

>what would their motivation be

1. russian/chinese troll farms trying to sow discord

2. account farmers trying to rack up comment karm
GitHub has always been about "social coding". This is a quote on their homepage on May 2008 (three months after GitHub was founded):

> What’s amazing about Github is how it really brings the social aspect into play. Chris and Tom are showing us all visually how git development is supposed to work. I know I personally had some bing moments once I started pulling in commits from external git repos.

https://web.archive.org/web/20080514210148/http://github.com...
Phew! Thanks
So the big question is why someone is bent out of shape for not getting MRR for writing that.
> People who are upset that GitHub suspended him: would you still be upset if the contents of the new package were "require('child_process').exec('rm -rf /*');"? If not, then how malicious does code have to be before a suspension is okay in your opinion?

Microsoft owns both Github and NPM. There is an obvious conflict of interest here.
> Oh well. Its an easy way to determine someone's level of internet knowledge.

No it’s not, plenty of people are very much of aware of the intended pronunciation and still choose to pronounce it another way.
Are you sure? PH's official line has always been "share with people you know but no bots/asking for upvotes/manipulation" or something akin to that. It's still in their community guidelines, albeit with language that gives them a bit of wiggle room.

https://help.producthunt.com/en/articles/2690626-how-do-i-sh...

https://help.producthunt.com/en/articles/484935-can-i-ask-my...

I think the problem is that they don't seem to have a good enforcement mechanism, and so for what must've been years I haven't really seen staff proactively go after those who do game the system. The only times when I've seen action taken is when the community comes out and basically calls out a product/maker. Most people don't care enough to do that kind of stuff, I'd imagine. I've done it a few times (either outright illegal stuff like peddling American legal services from overseas without qualifications, or obviously scam crypto projects) but these should have been obvious. The staff is also unresponsive on email, although better on the forums.
Github owns Npm, so I guess they feel entitled to be "NPM police" and nuke the rest of his output as collateral damage.
Microsoft owns Github... and NPM.
Right, the portal by default has a 7 day free trial mode. So you can get access to everything and cancel without being charged. Anyone who is learning programming through Learnly will be there for a while to end to end, and is being monitored for by me. So it's not just you being on your own
I think you completely misread the post.
> Regardless, it’s ridiculous to give something away openly under a permissive license and then later get angry when people use it exactly as you license it.

Doing your best to live in a bad system does not invalidate the complaints you have about that system.
Come to St. Louis where everyone mispronounces the French street names. Doug Crockford coined JSON as "Jason", but nearly every developer I've ever run into says "jaysawn", so that's how I say it too.
We can't keep making steel with coal either. It's slowly shifting over to other reduction agents.
I ran a citadel mail server on a pi, using a xyz domain..worked for few days before getting blocked as possible spam from google..no appartent solution... the old internet is indeed broken..
Why Cashew Nuts Are So Expensive
Gif if crunchy.
All fluff, no stuff
Trying to fight it is entirely democratic. You shouldn't have a problem with it. That would be like asking candidates not to campaign.
I wholeheartedly agree with this commentary. Any insight into why this is so much the case with npm but not seemingly as bad in other ecosystems (dependency trees in npm are huge).

I feel like the implicit trust makes even using popular packages such as react seem a bit sketchy. I’m betting react devs audit upstream packages, but I don’t know if any formal statements that they do. Multiply that by all the other common projects and you have a huge auditability issue.
Seems reasonable to at least temporarily suspend his account till they know what's going on. His account might have been hacked, or he might have gone mad and sabotage more projects.

Still a reminder though that GitHub is a private service and they are within their right to remove your work at any time for any reason, or for no reason.
Itself :-)
Maybe by "stock camera" he's talking about AOSP camera, not google camera (the proprietary camera that's the default camera on pixels)
Similar here but with sugar. I feel like I just need some fast-burning carbs to power the brain for just one more hour of work before I can rest.
> My big enterprise would sign up for it in a heartbeat.

People keep on claiming there is a need for a corporation like that. But Sun didn't really make any money with Java and had to sell to Oracle. Now all these silicon valley startup complain about Oracle costs.

Eventually, Microsoft will pull the same thing with NPM (and Github), they didn't acquire the package manager just for creds, they will make it profitable.

As for Redhat they are owned by IBM now.
How is the “limiter” implemented?
Marak Squires is a really shitty person with an extremely checkered past. I wouldn’t use any software he was responsible for.
Oh my god, this video is incredible. Truly a work of art.
Have you ever run npm audit on a project more than a week old? My high score is 3k new vulns in a single week…
That’s because you’re trying to do something fundamentally unsafe. A data controller is responsible for all the data they control and how it’s processed, as a result it needs to control and vet the entire data processing chain, regardless of how many processors or sub-processors there are.

If GDPR allows controllers to slip out of their obligations by using sub-contractors to firewall their legal responsibilities, then it would be useless as a data protection law. If you want to run a data processor that relies of byzantine structures in an attempt to create plausible deniability, then you’re gonna have a bad time.

Ultimately this is just a problem of dependency resolution, and conflicting dependency requirements, but it’s an unavoidable problem if you want to have truly accountable data controllers. Accountability is far more important than operational convenience. Remember GDPR exists to protect EU citizens, not businesses. It explicitly makes life hard for business, to ensure protection for citizens. Don’t like it, then leave, go exploit some other population.
The UK is still under covid restrictions and went into a huge amount of debt during the crisis. The events are not remotely comparable.
Using Distrobox to Augment the Package Selection on Clear Linux, Other Distr
Software is applied mathematics, but much of it in fact does wear out, because it doesn't exist in isolation. It runs on and uses hardware that wears out and moves forward - do Python 2.7 or the native extensions written for it work well on Apple Silicon? It relies on ecosystems - libraries, developers, users, operating systems, compilers, networks - that move forward. This is especially true of operating systems and programming languages, because they're the basis for the ecosystems which stand on them.

And so the problems with using Windows 2.1 are precisely the same as those with using Python 2.7 - you miss out on ever-mounting additional features that make your life easier; you miss out on an ecosystem which is no longer compatible with it; you miss out on security or bug fixes and need to deal with those issues yourself; you miss out on newer, faster, more reliable or efficient or even just existent hardware (could I find a printer for a Windows 2.1 box if I wanted to?); if you're working with other people, you'll find them harder to find and need to train more and more of them as they're increasingly unfamiliar with the dated system.

And all of these effects stack - you don't just lose out on upgrades for Python, you lose out on new features or bug fixes or security updates for the libraries you use that have stopped supporting Python 2.7 too, and so on. Your world gets smaller and smaller as the rest of the world gets bigger and bigger.

If you're maintaining a legacy system, and you don't want to risk changing it in any way unless absolutely necessary, because you're a bank or controlling medical or nuclear equipment or something, then that's something to weigh. But in any case, by refusing to upgrade when the rest of the world has moved on, you're racking up a technical debt that will grow by the day.
re: ...no registered business... etc. I would typically take that as a "don't engage with them" sign.

One of the challenges of being professional is to know when to refuse clients and their work. Both for potential clients and on-going clients gone bad.
At least you don't say it "Creag" as with Air NZ :D
The last time I used VLC to do some testings (on Windows), it doesn't even playback a typical video color range correct out of the box (TV range did not convert to PC range properly).

I haven't see such issue in any video players since OG MPC days.

After some quick googling I did find some solutions involving changing some video renderer settings manually, but IMO it's unacceptable for any media player on mainstream OS/hardware.

I do still respect VLC as an OSS project though, they made plenty of important contributions to the open-source A/V field.
"Jay Bhattacharya is a professor of medicine at Stanford University
The article is using dash. dash does not support arrays, as they are not part of what POSIX requires shells to support.
Jay Bhattacharya is a professor of medicine at Stanford University

That’s from sep 2020. I think professor Bhattacharya is aware of the numbers.
I see lots of comments on licenses. A FOSS license isn't a "I promise to host the built version of this artifact on npmjs.org forever" license. IANAL, but that's a right the developer grants to NPM when they choose to publish the package. If NPM's terms are written this way (and I imagine they are), then the developer can pound sand. But it's ultimately a relationship between NPM and the package publisher. We can say what we desire as consumers, but we're not party to that decision.
> I mean that when you advertise that something is going to do a thing (end the disease; prevent them from catching it), encouraging people to get the vaccine because of those benefits.

Maybe we have different sources of information. I've never heard anyone claim that the vaccine will end the disease or prevent them from catching it. I've heard that the vaccines will decrease the likelihood of becoming sick which it does.

> Then the reality is discovered to be that it doesn’t do any of those things, but it does provide a milder experience…and oh by the way, and that efficacy only lasts a few months, so go get another booster dose ASAP.

I assume by "provide a milder experience" you mean "decrease the likelihood of becoming seriously ill". That's been the sales pitch that I heard for vaccines since the beginning. Similarly, it was never known how long the vaccines would remain effective.

> Right now I know probably 5-6x the number of vaccinated people who have had Covid post vaccination than people who had it prior to the vaccine being available. I know unvaccinated people who have never had Covid, and vaccinated people who have had it twice…post vaccination.

So what? Had those people not been vaccinated, then they probably would have been _more_ likely to develop serious disease.

I honestly just don't understand your point. The vaccines are not doing as well as many had hoped. Personally I had hoped that the entire pandemic would have gone away once vaccines became available, but that hope was clearly misplaced. But that just means that I was mistaken and that I need to change my perception of what this pandemic will mean going forward. I think you should do so as well.
https://archive.fo/dWh2X
Many people who went through the traditional school experience would assure you that they too are still dealing with the negative effects! Being in school is not a panacea of positive experiences for a lot of people.
"Pinning the version" is inadequate. Do a shasum on the package contents. (Thanks, Poetry.)
Doesn't deno take this approach? The runtime does kinda force the question by only supporting imports via fully qualified URLs.
This isn’t a vulnerability nor is it corrupt, these are intentional actions on behalf of the project maintainer. Not that I agree per se, to be absolutely clear, however saying these are corrupt or somehow vulnerabilities isn’t the truth. This is the software working as intended
Can OpenCamera take a photo of a flickering sign? it seemed to me that it would wait forever for an image to stabilize before taking a picture. It's a great app for a classic way of taking a photo, but all modern smartphone camera applications capture everything 100% of the time and only apply some ML and pick the best shit out of a samples collected aroumd the time shoot button was pressed. I tried to live with OpenCamera for ages, but it's very slow to operate and doesn't support my wide angle camera at all. It's low light performance is poor and it is very slow even in the best of conditions. And it was buggy very often. 3/10, sometimes pictures were made, most often in a frustrating manner.
NPM should, because NPM is a platform for people to download dependencies.

However, I believe GitHub should not retain repos against the author's will, because GitHub is a hosting site.

As an analogy: if I upload an image to some web hosting platform / blog host / social media site / etc., and a lot of people hotlink it, and then I change or delete the image, that's my right. It would be wrong for the web host to decide the image is too popular and prevent me from touching it. But if I upload an image to Wikimedia Commons, it's no longer "my" image and Wikipedia has the right to keep using it even if I want to change or delete it. It would be wrong for Commons to let me modify the image retroactively.

Consequently, build tools and package managers that use GitHub directly are an antipattern, just as much as if your makefile did "wget ftp://ftp.example.edu/~someone/whatever-1.0.tar.gz" and expected that to not change.
That's the point. If the dev complaints are invalid because the contract doesn't say so, then the downstream complaints should also be invalid.
It's fairly telling that the stock photos used in this article are of a battery factory making new batteries, some lithium brine ponds, and a generic person in a white coat.

There's no photo of a big heap of old, rusting, worn-out lithium car
batteries, for a simple reason: no such heap exists.

Dealing with old lithium batteries is at present a complete non-issue, and there are at least tens, more likely hundreds or thousands, of companies actively preparing to recycle and/or refurbish them.

Well over 99% of lead-acid vehicle batteries are recycled. There's no reason to think that we can't do at least as well with lithium batteries.
Uncomfortable questions indeed. It is honestly hard to comprehend how people believe in it at all. I understand that people do, but it’s mystifying, like a belief in god or even Santa Claus.

Regardless, justice systems (incentives and accountability) and incarceration (incentives, and ideally rehabilitation) have nothing to do with free will. Any connection between free will (presence or absence) and the justice system seems to stems from some weird idea that it is about “punishing bad guys” or balancing some cosmic ledger. It is not. It is about controlling people just enough to ensure the long-term maintenance of society, as imperfect as our current implementation is. Look up Restorative Justice for approaches that focus on restorative outcomes for all involved, eschewing punishment and eye-for-eye thinking.

The cancerous cell does not carry any moral value; and neither does the immune system that destroys it. The cell infected by a virus is a victim of its circumstance, but that does not mean the immune system is should not destroy it.
But they are. A given version of a package is immutable on npmjs. In that particular case, the developer pushed a new version of the package.
Sorry. Cause was this:

https://www.howtogeek.com/435728/chrome-now-hides-www-and-ht...

the copy paste should copy everything...:-( Can't edit but moderators can...
The difference is often your bank. Some of my banks don't even have a way to initiate the charge back process (you have to write a free form email), presumably to reduce overhead and to avoid losing cases needlessly, while the others make it very easy with a web form.
"Why don't you do it?" is not a put-down I like very much, but when you say stuff like this

>yeaahhhh sorrrryyyy, i just see basically zero attempts to build systems that do better. there's a vast lack of trying in my view. calling this all inevitable & necessary is a dry, shrivelled response that accepts the fat nothingburger of effort anyone has put in to trying anything better.

I feel compelled to ask: "Have you tried?"
Personally I think the answer is "all of the above", at different timescales. Long-term, I'm betting that it'll end in hyperinflation. But on the short term, asset prices tend to track nominal interest rates better than real ones, because investors have a hard time correctly predicting the effect of inflation on an individual firm's cash flows. (We saw this in the 1970s, where P/Es compressed from about 20 to about 8 in response to higher interest rates, but company profits also rose with inflation, so when interest rates normalized in the 80s stock prices took off.) So if the Fed raises rates, asset prices could crash by 50% or more, which may trigger them to drop rates again, which further pumps inflation and raises stock prices, which causes another cycle of tightening, etc.

Expect things to get messy, and less predictable than they were before. The long-term trend is toward a worthless U.S. dollar and infinite stock prices, but there could be a lot of ups and downs before then.
See how DMARC, SPF, and DKIM work interactively
> that he would smile at actual stimuli, more than just a reflex action.

That's what a reflex is though: something done involuntarily in response to a stimuli.

Which really is the same as what smiling is in adults as well, unless you're faking it. Though adults are likely more capable of suppressing the response.

I feel I can't speak to the "social" smile, since in my culture it's really not as common. It's more language than emotion. If you're just smiling randomly here, people will assume you actually are happy and may ask you what you're so happy about - or take it personally. At most a social smile is used as a quick, wordless acknowledgement of someone. Almost a dismissal.

To me the social smile is just a lie, and the other kind of smile is what matters in the end.
Tens of thousands.

> There are currently over 1,600 Starlink satellites in orbit, and that number will continue to grow; SpaceX has filed paperwork for up to 42,000 satellites for the constellation.

https://www.space.com/spacex-starlink-internet-satellites-la...

They're aware of the risk of collisions, but toss in a few more vendors trying for the same size, and you can have potentially hundreds of thousands of satellites in the shells. They're big, but they're not that big.
I used to type with my right hand too far to the right so it could cover the arrow keys and mouse. My home position would have my index finger somewhere around the L. I had okay speed but terrible accuracy because I had to cover so much territory with too few fingers.

Learning to navigate with hjkl in vi was the turning point for me. I quit treating the bumps on F and J as "some weird thing that touch typists use" and made a conscious effort to always start with my index fingers resting on them, even not actively typing. Accurate vi movement becomes instinctual instead of having to hunt for the keys, and because I could navigate without leaving the home row, it turned into a virtuous cycle.

vi-style browser navigation add-ons further reduce the need to leave the home row. Vimperator and Pentadactyl were complete browser makeovers for vim enthusiasts, but they went away with the move to WebExtensions. I now use vimium which behaves mostly like a normal browser but retains the critical navigation keybindings. Even when simply reading a web page, I'm sitting right on the home row, with the two most-used keys (j to scroll down, and f to click a link) sitting right under my index fingers.

Switching to a laptop with a centered tenkeyless keyboard also helped a lot. There's no longer a temptation to have my hand float right. The trackpoint helps too - it's slower and less precise than the trackpad, but I make up the time by not needing to move down and back (the trackpad is still better when doing more than a single point and click though). When using a desktop with a traditional mouse, I center the QWERTY section of the keyboard and put the mouse on the left. I learned to mouse ambidextrously within a week or two and my hands no longer have to rest at weird angles.

Remapping Caps to Ctrl is another important home-row improvement. Ctrl is used frequently, usually chorded, and the ones on the bottom require contorting your hands to make it work. Bonus: I can use Ctrl-[ with my fingers still on f and j instead of reaching up to hit Esc, which is needed frequently in vi.

After making the conscious effort to position my hands correctly, everything else fell into place. My accuracy went up, which meant I had fewer times I'd have to look down and reposition, which meant I could achieve much better typing flow. I went from 30-40 WPM with poor accuracy to 60-80 WPM with pretty good accuracy over a couple years, without putting any additional effort toward training.