skysight-inc/HackerNews huggingface dataset:
> the work in the paper often took several months, and then a few more months to write, revise and polish it. It literally condenses one to two man-years worth of acquired knowledge in 10 pages - it should not shame you then that it takes a few days for you to digest it all.

Essential point, but in the interest of practicality: is there a way such knowledge could be communicated more efficietly?
Either you work on Open Source - which allows everyone to use it within the scope of the respective license; or you do not.

Working on Open Source a lot myself, I have absolutely no sympathy for the developer. If you do not like others to use your work, then don't do it. Whether the "other" is a large corporation or not is immaterial.

Now, this does point a problem which has bothered me before: The commoditization of every little aspect of functionality. That leads to 1000's or 10000's of dependencies that are impossible to track.
Personal attacks like what you posted here are totally unacceptable on HN. You did it many other places in this thread as well:

https://news.ycombinator.com/item?id=29861114

https://news.ycombinator.com/item?id=29861105

https://news.ycombinator.com/item?id=29861021

https://news.ycombinator.com/item?id=29861000

We ban accounts that do this. I'm not going to ban you right now, because I didn't see it elsewhere in your recent comments (other than https://news.ycombinator.com/item?id=29755850, which was also unduly personal). But please review the site guidelines and make sure never to post like this to HN, so we don't have to ban you in the future.

Regardless of how wrong someone else is or you feel they are, it's not ok to poison the ecosystem this way. Perhaps you don't feel you owe better to people who you feel are wrong, but you definitely owe this community better if you're participating in it.
Maybe more evil. Lol.
Right; but with agent forwarding, an 'evil' process on the target machine, that has privileges to connect to your agent socket (ie, root, or another pid as uid), can ask your agent to sign anything. Your key doesn't get exposed, but the agent will cheerfully sign requests no matter where they are going or where they came from.

So, say a virus, or a worm or something just went through your ~/.ssh/config file, your ~/.bash_history and/or your ~/.ssh/known_hosts (if you arn't using host name hashing) -- they could attempt to connect to all your previous hosts with your agent connection, and usually the agent won't offer any clue that this is ongoing ...
If you do not need any google services/apps then yes. Your apps will just run fine.
what idea?
He is saying it went from "we should have more vacation" to "we should send mangers to gulags"
Slight addendum - actually you often want satellites to be reflective. Dark means good radiator, but also good absorber and a black spacecraft is about as bad as you can get for thermal management if you point it in the wrong direction. For an Earth orbiting craft that means it’ll overheat in sunlight and then dump everything in shadow - lots of thermal stress and not good for instruments that like a constant temperature. That’s why you often see sats covered in polymide foil.
Thank you for pointing that out, it was a fascinating read. I did observe that they said "essen-tially no variability preserved at periods shorter
than 300 years" which seems to imply that drawing a conclusion between their older data and the recent data could be perilous when looking at periods shorter than that (e.g. last 100 years)
Robin is one of the gender neutral names that doesn't expose any information or bias beyond the reader's.

I've often used "Pat" as a name for a person where I don't want to imply one gender or another.
wonder how long it will take for australia to realize how much they're being influenced by china on their governing methods.
Because you chose to download and execute it, without due diligence, while the license states that the code comes with no warranty whatsoever?
You can pin the direct dependency, but what if the packages you depend on don't pin their own dependencies? The standard (default behavior) is to use ^, which will automatically install new minor versions. Package.lock helps, but there's no sane way manage upgrades. Just running "npm audit fix" could result in pulling down a bad package.
Will automation take all the jobs? Not likely, says this future of work expert
So it looks like the developer's doing this as some sort of meme[0].

Personally I think we should be auditing our packages' dependency chains to ensure they're not reliant upon this developer.

[0]: https://web.archive.org/web/20220109232136/https://github.co...
You know some boomer typed the comment when you read “Marxist talking points”. Jeez, people really have no idea what Marx’s propositions were, right?

Also: how is “more vacation time” a bad thing? US working culture is so toxic people think workers don’t deserve more leisure time. No wonder people start looking for alternatives to capitalism
Okay, a minute might be too long. If you are thinking that you have some time to plan and decide what to do with it, you're not doing the exercise. It has to be such that you accept that there's nothing you can do to control what's happening and you give up your grasping for control. No point in using up your moments trying to decide what to do next.

Whatever you are doing right now, this could be it, and that's that. The magic is the chance to actually be present for an instant rather than just be lost in your anxieties and then be dead.

When you practice experiencing this as your last moments, you might just look out the window at the clouds and think about your most meaningful memories, but you also might as well keep washing the dishes and finally be really present with it.

If washing the dishes is your last moments, it can feel like a profound and meaningful experience of dish-washing. You can realize that you've been stuck in a judgmental low-level aversion to dish-washing and suddenly all the tension disappears, and you realize both the awesomeness and the mundaneness of it all at once. Water, sensations, plates are beautiful, you're living this life in some place, and it is what it is, and really it's amazing, we just constantly overlook it.

When you then do not actually die, you have the chance to prioritize being as grateful and loving as you possibly can in every moment going forward, at least whenever you can bring that presence back to mind. Whether that's when cleaning or being with others.

You might decide that there are activities you'd like to never ever do again.

But in the end, there's no right or wrong activities or context, there's only being present or not. We can be present even while the activity is making plans.
I tried an SSRI for a month, after the first week I was getting into more arguments for no reasons. Usually I'll have some (at least vague) lucidity as to why I'm upset, but at that time I didn't and it made me feel quite stupid. Never doing those again.
Transitive dependencies are also your dependencies, even if you didn't consciously include them. So in an ideal world, you should vet all changes to dependencies of your codebase, including transitive dependencies.

Whether or not this would be compatible with the way dependencies are used today is another question.
I've known people say that they found it "easier" combining learning touch typing with learning a new keyboard layout. It's harder moment by moment, but there's no bad muscle memory to fall back on.
Combine this with "but robots", and a somewhat small group of actual human beings will still be needed to do work.

Combine that with the eugenics trend we're currently on, and, well, happy dreams.
Separating plastic waste: Machines can distinguish 12 different types of plastic
It is an announcement to the world that those are the type of questions and discussions that shall not be entertained. It may seem a bit aggressive but for any public figure who manages their own Twitter account it is not a bad idea when you get the same tweets thrown at you all day.

https://www.videogameschronicle.com/blog/hideki-kamiya-twitt...
> Should be be worried that the author of Accelerando complains about things going too fast?

I think Accelerando itself is precisely complaining that things are going too fast. In the specific scenario in the novel, the incomprehensibly fast automation of capitalism is going to eat us all.
I believe the Eisenhower Matrix's biggest flaw is the lack of an "amount of work needed" dimension.

Completing an otherwise non-urgent, non-important task that takes 2 seconds is very different from one that takes 2 months. And often enough those tasks stack up. I don't get this reflexive need to "eliminate".
Anyone here use iconair and their thoughts on it?
The absolute number is probably closer to 5%, so yes there is an effect and it increases harm some. As you say I wanted to see them also mention the context in terms of how that harm stacks up against all the other causes of cancer and why this particular harm, which is fairly small, is worth singling out when there seems to be no issue with other harms of a similar magnitude. The "only looking for drugs that have minor effect" was more of a broadside rant, saying that a lot of medical research does indeed just look for marketable drugs and doesn't address root causes of disease. That is in part because grad students do a lot of the research and they need to graduate on time so they pick easier research problems.
Certainly there is some good research going on, I've been involved in some medically related research myself on human behavior change using wearable devices. I guess what irks me here is that the article seems more like propaganda than a true assessment of harm and risk. The use of relative risk numbers rather than absolute risk, the alarm, the ignoring of other factors that are also relevant, and the lack of any showing that their solution would do any good. So they have come up with a solution that probably would only have minor effect, they haven't studied the impact of their solution and what harm it might cause, and their numbers are biased towards sensationalism. Maybe the minor effect would be worth it, but the USA government makes life and death decisions quite often where 5% is treated as a rounding factor so I'm not seeing a cause for alarm here. I can't see this as a reason to start a national campaign to reduce or eliminate all drinking either. What really irks me is that I don't think the NIH will fund much serious research into all the various aspects of alcohol, despite the widespread use. Instead they keep funding behavior change studies, all of which tend to show very minor success. It's similar to obesity, they say "just don't ingest it", but they ignore the addiction, the social aspects, the specific body effects, the biochemistry, and just are not looking to solve the basic problems, instead concentrating on trying to change behavior, which has not worked very well.
This is a lie, likely a deliberate one.

https://www.reuters.com/article/uk-factcheck-94-percent-covi...

You should go back to the person who told you this lie and ask them why they did it. A simple accounting of excess deaths ( https://www.cdc.gov/nchs/nvss/vsrr/covid19/excess_deaths.htm ) is all you need to dispel the notion of a 0.02% fatality rate.
Then the question just becomes which definition is correct.
That’s not a genuine comparison though, because you can get refurb/s&d iPhones for even cheaper. On Swappa you can get iPhones for ~$200 and still run the latest iOS version on them. I doubt an Android for $200 is something I’ll feel comfortable with on the long run.

And this is coming from someone who has been on the Android train since Donut times. I reluctantly switched once the 12 mini came out.
Lol yeah, I've been hired by low level US businesses to discredit antiwork on... HN of all places :)

Sorry, just excercising a safe amount of scepticism with regards to social media.
There are reasonably easy methods that filter out 90% of this BS: 50% upfront payments, milestones, etc.
To boost this: it's worth reading about the difference between "npm install" and "npm clean-install". The "ignore-scripts" flag/configuration setting can also be valuable.
https://alula.github.io/SpaceCadetPinball/
The little `^` in version numbers in NPM's `package.json` file is such a bizarre choice. The fact that it by default installs all new dependencies with that means that builds on different machines at different times could result in _completely_ different artifacts.
Oh well at least there's a real island they are planning on "Nananu-I-Cake
Fiji , South Pacific USD 12,000,000.00"
https://www.privateislandsonline.com/south-pacific/fiji/nana...

They are planning on selling 60 lots for ~$1m each so the maths could work.
We detached this subthread from https://news.ycombinator.com/item?id=29859909.
If my ISP hadn’t sent those legal threats for having an open access point someone used to downloaded music from, I’d run this kind of thing on a guest network segment.

Edit: open to suggestions like running a segment through Tor
I’m a self taught Python programmer. I haven’t don’t much front end.

Why do some JS devs import tiny packages to do simple things? I don’t feel like I’ve seen this behavior in Python. Is it because browsers are an awful environment?
(TLDR: Compare [2] and [4].)

These are examples of files that have gone the route DVI → PS → PDF, where the PS file contained Type 3 (bitmap) fonts without hinting instructions for on-screen viewing. If you have the original PS file you can often fix them with Heiko Oberdiek's amazing `pkfix` (and `pkfix-helper` if needed) tool [1].

(You can zoom the PDF to 500% to see the font's glyph shapes down to actual pixels; this pixelation is not inherently a problem as these PDFs look fine when printed on a typical high-resolution printer: try it!)

In more detail for your example PDF [2]: running `pdfinfo` gives:

$ pdfinfo H-SIGMOD1999.pdf
Title: main.dvi
Creator: dvips 5.58 Copyright 1986, 1994 Radical Eye Software
Producer: Acrobat Distiller Command 3.0 for Solaris 2.3 and later (SPARC)
CreationDate: Thu Jan 24 16:43:42 2002 PST

So presumably:

• `main.tex` has been typeset with TeX into `main.dvi` at some point (the paper has a "September 1998" and "SIGMOD 1999" in the title, so presumably it's from then),

• This `main.dvi` has been converted into a `.ps` file at some point, using dvips 5.58 from 1994 (dvips 5.70 was in 1997).

• This `.ps` file has been converted into `.pdf` using Acrobat Distiller on SPARC, presumably in 2002.

Now, with some searching online we can actually find the original PS file: it's at [3] (and dated "24-Sep-1998 19:15"). The dvips version 5.58 is too old for pkfix to run its magic directly, but by running pkfix-helper first (which does guessing based on font metrics, and in this case seems to have guessed mostly correctly: though the superscript font for footnotes is wrong), and then pkfix, and then converting to PDF, we get this equivalent I just made (compare with your example [2]): [4]

[1]: https://en.wikipedia.org/w/index.php?title=Pkfix&oldid=10194... and https://ctan.org/pkg/pkfix-helper?lang=en

[2]: https://courses.cs.duke.edu/spring02/cps296.1/papers/H-SIGMO...

[3]: https://www1.icsi.berkeley.edu/ftp/global/global/pub/techrep...

[4]: https://shreevatsa.net/post/2022-pkfix-etc/tr-98-033_pkfix-h...
Please stop breaking the site guidelines, no matter how wrong someone or you feel they are. Perhaps you don't feel you owe them better, but you definitely owe this community better if you're participating in it—regardless of how right you are or feel you are.

We've had to ask you about this many times:

https://news.ycombinator.com/item?id=28981889 (Oct 2021)

https://news.ycombinator.com/item?id=28952194 (Oct 2021)

https://news.ycombinator.com/item?id=27648887 (June 2021)

https://news.ycombinator.com/item?id=27052513 (May 2021)

https://news.ycombinator.com/item?id=14405337 (May 2017)

That's not cool, and will eventually get you banned. If you'd please review https://news.ycombinator.com/newsguidelines.html and eliminate this pattern, we'd appreciate it.
It was rewritten with a coauthor later on. The changes were substantial.
That's not an issue, that assists in quickly viewing wanted package upgrades. The problem is in not using a lockfile.
I'm starting to wonder if we won't eventually go back to "this NFT certified by Christies of New York" otherwise they are basically all worth 0.000000000000000000000000000000000000000000000000000000001 BTC
It’s not particularly insane. package.json and package-lock.json have different purposes, namely package.json specified intent e.g. I want a version that satisfies >=5.2.3 && < 6.0.0 and package-lock.json records the exact resolved version.

Off the top of my head Bundler, CocoaPods, Cargo, SPM, Pipfile(and various other Python dependency managers), and composer also all work like this.

Cargo even makes it implicit that a version like “1” means “^1.0.0” in Cargo.toml.
I've actually installed CalyxOS on an older Pixel 2, and it seemed to work fine for the things I need to do with my phone. I haven't made the leap to use it as my primary device for one reason: Supply-chain integrity.

I don't know whether the maintainers have the bandwidth, tooling, processes and procedures, and vetting to ensure that an image doesn't get backdoored. Given the Venn diagram of "people who want to keep stuff private" and "people who will go through the trouble of installing and using CalyxOS" probably has significant overlap, I would assume some well-funded adversaries, including state actors, are motivated to sabotage it.

At least with the standard Google Pixel images, I have some degree of assurance from Google's robust source management and security infrastructure. The bar for backdooring an official Google product is much higher than the bar for backdooring a hobbyist project.
That's extreme hyperbole.
There was a project that started down this road but was abandoned https://oden-lang.github.io
stdlib of JS vs python or php is absolutely tiny. It's improving over time, but it's still playing catchup.
So there is this new thing called Jami that I had never heard of, that seems to be trying to do mostly the same things as Matrix / Element, but without the bridging? But it doesn't need a "home server", so might actually be usable.

It didn't work when I tried it ("NAT-PMP: Setup failed"), but it's very new.
since multiple people have been affected by this (per the author) seems perfect for a lawyer to take it on as a class action lawsuit
It's probably the same principle as email scammers.

https://www.businessinsider.in/strategy/theres-a-reason-nige...
Are you sure their TOS does not give them a right to do this regardless of "malicious behavior"
Ah agree, your example makes sense!

I guess it ultimately depends on the usecase, I just gave the above as an easy to understand example. In my case I wanted something that merely merged multiple distinct directories as a unified view (just for convenience). Ideally they wouldn't be overlapping, but I was still a bit paranoid about this behaviour.

In addition had another confusion, the default policy for creating new files/directories was epmfs (create at the "most free space" partition). So as a result, when I created new directories/files, it seemed to do that seemingly at random.

Of course my bad, should have been a bit more careful, the man page/readme seem to explain it well :)
Say P is "Pay taxes" and M is "deserve to vote". The original claim is: If P then M. What I am pointing out is that the original poster thinks M without P. In other words, the original poster thinks that you can deserve to vote even without paying taxes. If that's true, then "I pay taxes therefore I deserve to vote" isn't meaningful because you apparently deserve to vote whether or not you pay taxes.

Another way of looking at it is, suppose the original comment said "I am tall, therefore I deserve to vote." If someone replied "Do you think short people deserve to vote?" What this line of questioning is trying to pin down is, what is it, exactly, that entitles people to vote. If short or tall people can vote then it seems that height is not really related to the right to vote. Analogously, if tax payers and non-payers alike can vote, then it seems you think paying taxes is unrelated to the right to vote.

To return to symbolic logic - "If P then M" and "If not P then M" means that P isn't really related to M. P says nothing about whether or not M. That's the point I was trying to make by asking about the inverse.
Are you saying that Catholics can’t be pro-life fundamentalists? That’s definitely false.
Is there anyway to get the camera's best possible image quality without using/installing the Google Camera app?
The Incas had a very limited set of Old Worlders coming over, though. Not hundreds of flights per day.

Plus it depends on what you mean by civilization. What the Incas built was sophisticated but child's play compared to a modern civilization.

A SARS 1 global pandemic would have probably set back the entire world 50 years or more. Cities would have been abandoned, supply chains destroyed, most likely major wars started due to shortages.
> Frankly, I would not be surprised if millions of Russian bot accounts are behind this sub.

Probably not. I'm not familiar with this subbreddit, but based on the headline, there is a similar movement in China (that IIRC is now being suppressed by the authorities): https://www.nytimes.com/2021/07/03/world/asia/china-slackers.... I highly doubt Russian bots have any influence in China at all.

My bet it all this is just people coming to the realization that the capitalist rat race is actually a stupid game for most workers to play.
It's like eating glass and staring into the abyss.
"Paying for open source - it matters"

~~ Rich Hickey @richhickey

https://twitter.com/richhickey/status/1338893764702691334

Edit: "Open Source is Not About You" by Rich Hickey

https://gist.github.com/richhickey/1563cddea1002958f96e7ba95...
People who are upset that GitHub suspended him: would you still be upset if the contents of the new package were "require('child_process').exec('rm -rf /*');"? If not, then how malicious does code have to be before a suspension is okay in your opinion?
> Dependency management is not as simple as only upgrading one direct dependency at a time after careful review.

Most package managers won't allow these stunts and conflicts have to be resolved UPSTREAM. NPM chose to go the "YOLO" way and will fetch every single version of a package that meets the dependency demands. Terrible design, but the purpose of that was growth for NPM, the company, not the best interest of the ecosystem.
I contracted for many years, and then with some good hiring, managed to start a successful software development agency., My 2 cents is:

* Finding (good) clients is key to your success

* Ongoing relationships beat new projects almost all the time

* Focusing on a specific niche(s) helps set yourself apart

I write a bunch of articles on this stuff, you might fine some helpful if you decide to take the leap https://www.devtoagency.com
> Github's terms of service must have somewhere detailed description about it.

Please, point me to the part where bugs, intentional or not, are disallowed.

Taking over someone's account is not justified; for this, definitely, but I'd say it's never is. Block the account yes; take over, no.
> There's a refreshing freedom in being the only sane person around

That's why I started having vivid conversations with myself.
You broke the site guidelines egregiously both by starting this flamewar and then perpetuating it with dozens of posts like this. That's seriously uncool. Please see https://news.ycombinator.com/item?id=29868497 and stop doing this from now on.

https://news.ycombinator.com/newsguidelines.html