skysight-inc/HackerNews huggingface dataset:
On the other hand, I think the main point of literate programming was to make programs easier to maintain, and I constantly hear about the big gap between developping a notebook and pushing the code into production. Notebooks feels more like an answer to how to quickly experiment rather than how to make knowledge last.
Let's break this down because I am a little confused as to why you and the other poster brought up the inverse of the original argument.

Original Claim: Because I pay taxes I should have a say in how that money is used.
Restatement: If I pay taxes, then I should have a say in how that money is used.

If P then M.

You suggested that the OP is making a mistake because he is rejecting the inverse of his statement and that somehow his original claim is weakened as a result.

You say that OP is wrong to reject "If Not P, then Not M", however the inverse of a conditional statement is NOT logically equivalent to the original statement and as such it's rejection has nothing to do with the validity of the original claim.

The inverse of a conditional does not follow from the original conditional. What follows from the original conditional statement "If I pay taxes, then I should have a say in how that money is used" is the contrapositive: "If I do not have a say in how the [tax] money is used, then I do not pay taxes". That is all, nothing more. You cannot infer anything beyond that from a simple conditional.

I suspect you have committed the inverse error. https://en.wikipedia.org/wiki/Denying_the_antecedent
> I don't think you can make a DMCA request on behalf of a copyright holder without their permission

In theory, you're right. In practice, there's never any actual consequences for filing a false DMCA claim. Worst case is that the thing doesn't get taken down, but that's no worse than if they didn't file it at all.
Very often, package installation is automated as part of a build pipeline. So if you want to build and deploy a new version of your software, you'll kick off the pipeline and that could potentially download a newer version of a package than was previously being used.

Incidents like this highlight that this may not be the best idea.
The light has traveled for 120 million years, but the galaxy today is further away because the universe has been expanding the entire time. So the distance between the position of the object 120 million years ago, and Earth today, is 120 million light years. I think :)
Your source for your last point has the conclusion of:

“Although these biases did not significantly inflate estimates of drug efficacy, reporting biases led to significant increases in the number of positive findings in the literature.”

Which is literally the opposite of what you’re citing on efficacy.
Bad faith?
The question is "is it worth it?".

New scientific instruments usually come with a bunch of discoveries, because we are now able to see what we couldn't see before, but there are diminishing returns, because we run out of interesting things to look at.

Some platforms can be upgraded, like the ISS, ground based telescopes, and Hubble in 2009, so that new science can be done, but it is not the case for JWST. So I suspect that there will not be much left to do with it after 10 years, especially if it is not fully operational. It will not be completely useless, but I expect money to be better spent making a new instrument, with better technology and guided by the latest discoveries, than trying to extend the life of an aging instrument that has given most of what it could give.
Whilst I don't disagree on the point of r/antiwork being an echo chamber...
..."effective geo-lock" - Yeah good luck with that.

If there is truly such a thing like a troll campaign, no form of geo lock will ever stop them, but most certainly you will stop legitimate users instead.
Would you ever consider making this a product?
Ideally
Yea it sounds like baiting with something free to get users, then switching to solicitor mode.
Is more vacation time really radical? Don’t US workers have much less than other Western countries?
can I develop/test an android app on a phone running calyxos or graphene, and expect the app to behave the same way on a normal android phone?
> you are a drain on your employer and society

A drain on the people that are enabling this type of attitude in the first place? I have a hard time understanding your reasoning here.
Something about this doesn't sit right with me...
I think it's safe to say that people who download a data-generation library intended for testing are not looking for infinite loops.
Ahh got it. Are you going to round up the people and get them into jail? You are talking about a threat of force, can you back this up? Would you volunteer to knock doors in Middle of Nowhere, AL to catch the people not paying the fine? or are you expecting someone else to do that for you?

Honestly you just sound like a troll, and you were called out on your previous comments. You are talking about some caricature "AntIVaXeR" that you don't even know in real life. After reading your other comments I don't even believe your story, but idk, maybe you do are that dissociated from reality that you believe it.
Plenty of places around the world offer dark enough conditions (but make sure it’s a new moon) - in the US you just need to get out to Arizona or Joshua Tree (or similar empty places). In Europe and elsewhere look for International Dark Sky Reserves. In general go visit places where telescopes are built.

Possible that some of it is from scattering and then if course you wouldn't get that in space as there's no atmosphere to scatter from! Scattering is incredibly faint though, even compared to starlight.

See also gegenschein and the Zodiacal light - both are backscatter effects.
Again, read the white papers. The details go beyond either a naive or cynical reading of things that they highlight on the webpage that consumers are most interested in.
If a virus infects more people it has more of a chance of spreading and more of a chance of mutating into a deadlier virus that affects a different demographic. Bringing sweden up but not the vast number of countries or active measure still currently in place, including mass vaccinations, seems to serve a narrow narritive. Bringing up civilizations and cultures that did in-fact get destroyed by viruses doesn't really help your argument.
> Is there something like this for jq?

It's a filter. You can name-drop math stuff and even mention monads and the like, but it's just predicates, maps, a reductions.

Also, I'm not aware of a single person who ever looked at relational algebra beyond the introductory lessons of a relational databases 101 course, and even then that stuff was mostly in the way.
Requiring multiple signatures from several trusted sources would have.
Do you mean carbon footprint by consumption and per capita? Then it is the US by far and away.
I feel for him and his mental state. I get the feeling he feels betrayed by huge corps using his software are making millions, whereas he still has to rely on measly donations for survival. Unfortunately, that's not how open source has worked so far. Hypothetically if he gets paid a 100k, does he plan to share it with the other contributors?

I don't think there is a right or wrong here, but relying purely on independent open source software as a career is a recipe for disaster. It sets up unrealistic expectations, and probably burnout and heartbreak.
Over at the thread about pluton, i was curious about what the deal is with it, and had to piece it together. Azure Sphere is a linux distro intended to operate on the pluton hardware

MS already has TPM but the problem is the physical exposure of the interface between TPM and CPU. this allows someone to snarf the keys and determine the bus signals, For this reason MS wants to develop a stake on SoC in order to physically protect the transactions between TPM and CPU.

Basically MS wants to put a piece of hardware inside the chipset packages.
and im guessing, will want to do this in a way that makes microsurgical methods near impossible.

--i think its all about an end to end secured cloud service platform, what happens as time goes on is to be seen
GitHub is a private enterprise, never forget that… It's not scary, GitHub is a community owned by a corporation, and they have every right to kick this guy to the curb as he is a bad actor. This is the same reason I'm cool with them kicking MAGAs spreading lies to the curb. It's one thing to remove/deprecate an NPM package, it's another thing to deliberately break 10s of thousands of software installations because you want to act like a baby. He no doubt did thousands if not hundreds of thousands of dollars in damage and will continue to do so as developers find their stuff broken all over the internet.
There are package exclusions, package forcing and of course, full dependency tree checks where you review what everything pulls in.

The JS ecosystem will probably have to change but because it's so decentralized, that change will be orders of magnitude harder than, for example, PHPs transition from 3 (4, 5) to 7.
As much as I hate anti vaxxers, global vaccination is simply not possible in any ammount of time that would have stopped the pandemic. It will be a routine vaccine worldwide only after the virus went endemic anyway.
Product Hunt is useful if you treat it as a software directory. It lists free and open source software (especially self-hosted B2B services) that can be hard to find elsewhere.

Here's a list of the most recently submitted open source products on Product Hunt:

https://www.producthunt.com/topics/open-source#order=by-date
So is the earth, really. Reminds me of how all humans would fit in a ball of meat in Central Park [0]. The satellites aren't much bigger than humans, so even if there was a starlink satellite for every single human, it would still barely make a dent. Let alone the fact that the surface area would be larger 2000KM up, and without oceans.

[0] https://www.reddit.com/r/theydidthemath/comments/p0qws3/self...
Please do not cross into personal attack in your comments here, and please do not post in the flamewar style, regardless of how right you are or feel you are. It's destructive of the kind of site we're hoping for here.

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.
The shingles vaccine is a more concentrated version of the chickenpox vaccine because immune response isn't as efficient in older people. You might consider getting the chickenpox shot, shingles are awful.
Ask HN: Reliable and scientific exercise guide/program
I'm a software engineer. Like many of you, I'm spending almost all day sitting or standing still at my computer and I enjoy it as long as my body cooperates.

There are enough scientific proof and personal experience showing while I'm losing muscle it starts getting harder and harder to sit and work. Back pain, shoulder pain, etc. no matter how correct I sit/stand.

I hate gym and exercising (even though I used to be a serious gymnast between ages 9-18) but there's no choice but to be active and build enough muscle, otherwise, I can't continue sitting and doing the work I love for long hours.

I'm looking for a reliable, trustworthy, and scientific guide or program for building muscle. I'm not necessarily looking for motivation or coaching, just a proven program that helps me gain and maintain enough muscle to stay healthy. Also, it doesn't need to be an app.
> Free as in freedom is not the same as free as in beer.

It's a choice to distribute software for "free" as in "free beer".
"this software comes with no warranties" ?
Employer hires one person to do the jobs of four people - smart business sense

Employee is one person doing the jobs of four people - fraud??

---

We need to stop praising businesses/execs who work the system while condemning people who do it. Uncaring, amoral corporate culture sees people as mere resources, to be mined for value until they're depleted.

If this is fraud, then expecting somebody to do the workload of multiple people while only receiving one person's salary is also fraud, and that's a conversation I'd be very willing to have.
What does the model predict would happen if you put all the good schools in one location?

Does the model predict that people would need an armed guard to escort a child to school so she could be taught in an otherwise empty class because only one teacher was prepared to teach her and no parent would let their child be taught alongside her?

https://en.m.wikipedia.org/wiki/The_Problem_We_All_Live_With

If not, then it's not really that effective at predicting the reality of the same era it was created in and so what's it actually good for except excusing a variety of terrible acts?
Change that to multiple maintainers. Best practices should mean that any single point of failure is mitigated. I'm shocked to say it, but the blockchain might actually be a useful model for trust here.
Hard disagree. As Facebook, Twitter, and Instagram become increasingly ad-laden and non-chronological, the real value of RSS becomes more and more obvious. I may exist on the fringe as someone who doesn't use any non-HN social media, but I know several businesses in my city that have cropped up in the last 2 or 3 years that basically only pushed out information on Facebook and Instagram. Since those services don't guarantee that your posts will ever make it to followers, much less in a timely fashion, those businesses have really struggled when they have to announce things day-of, or even the day before something happens (closing due to snow, or a party; changing their hours; removing something from the menu due to a supply chain problem; etc.). I've seen a lot of these businesses die, and I suspect Facebook and Instagram contribute. It's not that RSS would save these businesses. But it is true that if you build castles on the sand of another company, you have nobody to blame when your castle collapses.
Please do not perpetuate flamewars on HN, regardless of how right you are or feel you are. You did a ton of that in this thread. That is seriously not cool. It's not what this site is for, and it destroys what it is for.

https://news.ycombinator.com/newsguidelines.html

Edit: we've been having to ask you not to do this kind of thing for many years:

https://news.ycombinator.com/item?id=29220499 (Nov 2021)

https://news.ycombinator.com/item?id=25615528 (Jan 2021)

https://news.ycombinator.com/item?id=23384415 (June 2020)

https://news.ycombinator.com/item?id=22480861 (March 2020)

https://news.ycombinator.com/item?id=18761110 (Dec 2018)

https://news.ycombinator.com/item?id=11885616 (June 2016)

If you keep doing it, we're going to end up having to ban you, so please stop doing it.
The tool should take some blame here. I agree that it’s ultimately the developers fault for allowing code to be automatically injected from not fully trusted sources on minor updates, but the package manager makes it way too easy to do.

For example, when I npm install a package, it defaults to specifying a semver compatible version in package.json, rather than doing the secure thing and pinning a version.

But whether this default behaviour should change is not is also a security tradeoff. Pinning versions means that you will keep using an insecure version of a dependency until you update, whereas using a semver compatible version allows you to “automatically” pick up a fixed and compatible version. In practice however with lock files and local caches, the developer always needs to update for security patches anyway.

However, given the current NPM landscape (with packages having numerous small dependencies from a large variety of authors), going towards the former instead of the latter is definitely makes a lot more sense.
> keeping software up while adding more features is costly

The software maintenance is also given out as a gift. That's a choice.
You didn’t though, you said something much much less useful than that -“you’re slightly wrong, here’s a Wikipedia article for you to read”
How is this not considered PII and subject to all of the disclosure and control requirements we all must abide by? May an employer opt out?
> but I would hope that such a poison-pill would be caught long before the package became widely depended on.

I'm not sure what about the current open source ecosystem makes you think anyone would catch something like this.
Sorry, this is bullshit.

> When investigators entered Squires' apartment to look further, they found more bomb making items including potassium nitrate.

Magnesium powder, sulfur powder, copper powder, aluminum powder, hobby fuse and mixing cups were also discovered in the home.

"The chemicals separately are what they are, but taken together they can assemble an explosive device," Deputy Commissioner of Intelligence and Counterterrorism John Miller said. "There were books about military explosives, booby traps and other things...What we're looking at here is the totality of the circumstances that raised our concern to a level where we're going to need more investigation."

Does that sound to you like he wanted to make a candy rocket?

You can do chemistry all your want, but attempting to build a bomb, even of the attempt doesn't succeed, is illegal.

At the time of the article, the investigation was still ongoing. That's likely why they were no charges yet.
I assume GitHub initially saw this as someone gaining unauthorized access to his account. How often does a maintainer add something like this? Without knowing it was actually him I can totally see why they'd think it wasn't a proper update.
Psychedelics seem very promising for the treatment of PTSD at some point down the line, but it’s not even close to studied enough. E.g. a recent promising study in Nature was 90 participants. Taking street MDMA is not the same as being administered MDMA in a clinical setting as an aid to talk therapy.

I am enthusiastic about the advancement of research in this area and frustrated that it was delayed for so long due to political reasons, but please keep in mind that people with mood disorders or trauma can be desperate and may not make the best choices for themselves on their own.
If you're using NPM without lockfiles, you're gonna have a bad time with discrepancies between trying things on your dev machine and building things in CI machines.

When you have a package-lock.json NPM will install exactly the same version of everything in your dependency tree, making the CI builds much more like what's on your dev machine (modulo architecture/environment changes)
Polite about……being nazis? Good for him for not lending credence to the idea that civility makes anything acceptable.
You're not an idiot for believing the professor, but you could stand to apply more critical thought to the question, and look for additional sources before thoughtlessly propagating what you heard on a podcast. Just because "a professor" says something doesn't mean you should reflexively believe it.

As an example, a Stanford professor by the name of Dr. Scott Atlas was a prominent voice within the Trump administration who actively advocated disobedience of public-health orders at the state level. When the professor posted this (since-deleted) tweet:

https://i.imgur.com/z0OsMcg.png

.... I wrote his department head. "I thought you should know that some idiot is out there claiming to be associated with your university." They replied, "Agreed, this is irresponsible at best."

Funny thing, though. Dr. Atlas is still a Stanford-affiliated professor, more than a year later: https://profiles.stanford.edu/scott-atlas Tenure is a powerful thing, I guess. Stanford apparently can't distance themselves from this clown, but you and I can and should. That's not who you listened to, by any chance, is it?
This raises an interesting business idea. How much would developers and companies be willing to pay for an npm alternative with human reviewers?
It isn't necessary the package was used in CI jobs only and not production servers.
> The problem seems to be the license agreement does not allow MS to release the game as a standalone copy.

They've included frickin' Candy Crush as part of Windows 10, so this would hardly be an obstacle to including Space Cadet again.
Except the Spotify model is also rife with issues. Artists generally hate Spotify and hardly make a living off of “pay per stream”. Most of them still very much depend on tours, merch, and, at the higher level, brand deals to make any money off of their craft.
This was already explained upthread: "the death count is exaggerated because the criteria for a Covid death is that a person is dead and also tests positive for Covid regardless of how the person really died."
Whether or not you agree with the politics in question, it hardly seems surprising that a forum about bad working experiences and exploitation would respond positively to ideologies which profess to explain that abuse (in a way that doesn’t place blame on the individual).
You also have to rely on all of your dependencies doing that for their dependencies and so on.
It’s really a mindset/vigilance you need for the whole ecosystem.
Is it me, or the island looks on purpose like crocodile/alligator? heh
In an infinite loop, yes.
Regarding argumendum ad dunning-krugerii:

https://oliverbeige.medium.com/how-citing-dunning-kruger-sho...
The Inca didn't even have the concept of infectious disease, or quarantine. If you want a 99.9th percentile bad outcome look at Black Death Norway. Civilization didn't collapse in the face of 60% of the population dying. These are people without the germ theory of disease, never mind antibiotics, antivirals and the state capacity to seal borders completely and modern hospitals. COVID can be really, really bad without it ever having been likely to be a civilizational or species level threat.
Call up your rep and ask them to add it to the budget.
> Australia is really heading down the wrong path.

It's already a long way down that path.

This is another example of our vindictive govt that goes after anyone who causes bad press for them.
Kazhakstan has: uranium, Baikonur cosmodrome, anti ballistic missile test site, and 25% ethnic Russians. Russia wants to have access to the resources and facilities and protect the ethnic Russians.
Yes, which is why Pages has some dedicated logic to help preserve assets that were "seen in the last version now gone". Unfortunately, the "cache everything" setting at the CDN overrides that. We should probably be clearer about that in the docs, and potentially we could autodetect that setting when you register your custom domain, hmmm...
The company I work for uses Haskell and Go. I can immediately read and comprehend what’s going on in any of the Go repositories in a few seconds. By contrast, every Haskell repo ends up becoming a DSL — which is a pleasure to write and refactor for the original authors but impossible for anyone else to understand.
Yes, but often only for major bugs that are deemed worthy of developer's attention. In practice it's not always so great. Read systemd's bug tracker, not all user-reported bugs get fixed to those users satisfaction, neither by redhat nor by systemd. Systemd is too big and developers refuse to accomodate everybody.

Shell scripts are tunable to the specific system. If a rare bug is in a shell script, I can usually find and fix it, unless the script is insane, in which case I can write a sane one.

If a bug is in systemd, I can't easily fix it myself. I now have to fight upstream to recognize my issue and fix it for me. I don't have a good experience with this. Nowadays I'd rather write a small script to work around that bug if possible. Much faster and much more effective.
Adding this kind of disclaimer notice doesn't mean you can do whatever you want.

If you perform action in obviously bad faith, your account will be suspended – it's very simple.

Github's terms of service must have somewhere detailed description about it.