skysight-inc/HackerNews huggingface dataset:
Organizations already solve this by mirroring repositories with tools like JFrog Artifactory.

New versions of packages are verified, approved, and mirrored.

(The revenue split part isn't really a part of that, but you're not really guaranteed revenue as soon as you choose an open source license. You have to make some kind of value-add like support or cloud services as a complementary upsell.)
Chargeback time window has probably passed for the first 1303 hours since they waited so long to issue chargeback. It could be a card associated with Robin’s previous employer which would also explain why the charges were left undetected for so long. Why wouldn’t he have logged the hours if he’s a scammer? Why would he go public with the story?
Probably with a sticker on the object, pointing to a URL containing the full list of licenses.
I'm not a writer and I make up shit all the time on anonymous and semi anonymous comment threads. It depends on my mood and the atmosphere of the thread. I avoid it here because I have some sense that this is an "adult" place to be where common sense opsec is reasonable but I don't have to invent anything to fit in or comment. On reddit or other such things though, hell yeah I'll drink a pitcher of Miller Lite while watching a football game and shitpost the devil's advocate or contrarian position under a pseudonym with no attribution. I justify it by calling it social research.
An island does not a world make.

Sure you can generate small, believable structures with it. Like Townscaper demonstrates.
"inspired" my ass. It's a fork, not keeping the licence terms.

https://news.ycombinator.com/item?id=27254092
Yeah. It's not exactly the end of the world if a dog drinks from the toilet bowl, but we're the type of dog owners who have a lot of physical contact with the dogs, so we'd definitely prefer them not to be dripping with toilet water.

Especially if the cat doesn't learn to flush like Charles Mingus' cat.
absolutely, I eat worse when I sleep less and the effect is doubled in winter. I really lay on the calorie rich "soul food" in winter as much as I try really hard not to.
https://ap-st01.ext.exlibrisgroup.com/61USC_INST/upload/1641...

https://d1wqtxts1xzle7.cloudfront.net/38936810/OralTradSeaLe...

https://watermark.silverchair.com/113nunn.pdf?token=AQECAHi2...
Very unexpected. He just finished up a two hour set only 16 hours ago in Jacksonville according to his Twitter[0]. Definitely going to miss him.

[0]: https://twitter.com/bobsaget/status/1480097652851286017
I always enjoy long term future predictions, because our human brains are obsessed with trying to resolve tension somehow, or rather assuming that tension will resolve itself.

Specifically, in the political sphere the prediction that there's a) any intentionality or consistency in what's happening globally and b) that it'll have evolved into a "steady" state over the next ten years, one way or another.

A possibly better prediction is that we're permanently past political "stability" such as what arguably existed in post WW2 America (I guess) and western Europe (I know even less about that). From maybe 2015 (or earlier?) onwards, forever, politics will stay complex, seemingly cataclysmic, and will seem as if the other shoe is perpetually about to drop.

We've developed a permanent emotional complex around political discourse, where the boss music is playing all the time, even when we're just hanging out on our couch. By having the deluge of information about everything that we have now, any random thing can now become The Final Straw for whatever issue you'd like to pay attention to. Any given moment, any given news article can portend the doom of Your Favorite Thing, and it will be, truly, The End.

If this is right, the good news is it's not actually going to get nearly as much worse as it always seems it's about to. The bad news is it's not going to get all that much better, either. Just small steps forward or backward, where progress is measured in decades, not years.

Hopefully we get used to living in the tension, though it's probably more accurate that we won't, and that'll probably be okay.
Most are tax havens that turn a blind eye to money laundering and other financial crimes.
The maintainer gave their work away for free. By definition - and by explicit license it isn't worth any wage, much less a "living wage many times over."

The maintainer wants to have their cake and eat it too - they likely believe in FOSS for moral reasons yet consider it immoral when companies take their software and use it freely under the terms offered.

If you want people to pay you for your work, don't give it away for free. If you give it away for free, don't have a temper tantrum if someone gets rich off of your work without compensating you, because those were the rules you chose to play under.
> The software industry doesn't have any standards about how to publish or consume software, and that leads to problems like these (not the conflict over OSS, but the ability for random upstream software to randomly compromise thousands of other projects).

The publishing side is irrelevant. Anybody can make any package available for free on the internet. The unwillingness of some private businesses, often billion dollar companies, to audit and vet libraries because obviously, it costs money and these businesses use open source as a way to cut cost at first place, is the issue. The entitlement.
I was same, but what helped me was to start using an ortholinear keyboard, which kind of forces you to use the correct finger for each column.
One other thing to note - our ability to lockdown and maintain a functional society was contingent on the ability for enough (privileged) people to work from home that the internet has now afforded us. A few decades ago our world looked and worked very differently, and the pandemic response would have differed accordingly; if lockdowns might have actually had a direct material impact on the intelligentsia, managerial class, liberal elite, etc. or cost them their homes or their jobs, there would have been far less of a push for lockdowns.

Naturally, the working class still got screwed - either you're "non-essential" and lost your job or were "essential" and ran a risk of contracting COVID that your overlords got to avoid from the comfort of their own home - but it might've helped slow the spread of the virus, some.
Remember when "Prime" meant two day delivery? I haven't seen that in years.
Agreed, they've done a lot in the past and they have my respect. It's saddening that they're struggling nowadays and are dropping the ball. :(
Yeah, that's my current thinking as well, but I haven't seen anything about it written anywhere.
Unfortunately too many and it is still the case. France can't hire teachers, can't keep the ones it has and continues to force young unexperimented ones into the harshest areas. In US it is not better, most are only some kind of test preparers and discipline managers...
If evolution is correct and I think we can skip debate on this, then the chicken is results of mutations from a previous lineage of animals…

Those mutations happen at/inside the egg. At some point… little by little, two animals have an offspring that isn’t exactly like them.

The chicken egg came before the chicken that laid it. Some other animal laid it. And likewise the egg existed before the chicken inside it developed.

In no scenario that I can steelman does the chicken ever come first.
Two startups tried to catch up to makers of advanced computer chips, and failed
Perhaps that reporting on "bomb making supplies" is generally as substantiated as reporting on "child pornography", which is to say not at all? Heavy on the innuendo, light on the professional responsibility.
This is a good TED talk on Far UVC: https://www.ted.com/talks/david_brenner_a_new_weapon_in_the_...
This goes both ways. Don't blindly use MIT licensed code if you aren't okay with the risk of something breaking or something malicious being inserted.
Ask HN: Book recommendations about sleeping and falling asleep
I think EVs will quickly overtake ICE vehicles once they're price competitive and battery manufacturing scales up to the levels needed, but that's a separate issue from government bans.

My point is that several governments now have policies in place that say they're going to ban the sale of new ICE vehicles after a certain date. But they aren't going to disallow the use of ICE vehicles in their country or on their roads, which is what it would mean if they were literally going to ban ICE vehicles.

I've seen a number of articles with headlines like "X country is banning ICE vehicles after 20YZ" but then the article contents specify that it's a ban on the sale of new vehicles, which isn't the same thing. This is unhelpful sensationalism that is likely to convince a lot of conservative people that government agents are going to show up at their front door on a certain date with a tow truck to take away their Ford F150 or whatever, and that's just not the case. So, whenever I see anything that uncritically repeats that idea I find it necessary to post a comment saying that "banning ICE vehicles" isn't the same thing as "banning the sale of new ICE vehicle" in hopes that fewer people are confused and maybe more people will demand clear and accurate communication on this issue.

In the long run, bans on the sale of new vehicles will mean that existing ICE vehicles will wear out unless people want to make the extra effort to keep them running, which for most of them it's just not worth it. So, this achieves the needed policy objectives without antagonizing existing ICE vehicle owners. In other words, it's actually a much more reasonable and moderate position than what the word "ban" implies.
AROSE
MINTY
GUILD
CLICK
FLICK

No automation (apart from the first two words that I use in real Wordle)
>27-year-old Russian kid who looks like a tweaker

This increases my trust in the tech if anything. Shame about the rest though.
I am 25 years old, vaccinated two times (we are only eligible to 2 vaccines in Québec, Canada), had contact with a COVID positive case on sunday last week (January 2th) and I got sick enough to not be able to work from January 4th to January 9th.

I was not hospitalized and I was not able to work due to some quite heavy symptoms that prevent me to talk or focus more than a few minutes on a task.
Zalgo Text
Split keyboard, a key map printed out and placed under the monitor (so you Don't Look Down), and moving to colemak (without changing keycaps, that is the important bit - if you want to stick with Qwerty, just use blank caps). Plus a lot of practice with programs like GNU Typist, keybr, typeracer, ratatype, speedcoder, keyzen-colemak, typelit.io ...

This said, some things will remain hard probably forever, if you have a short pinkie like me.
What are the set of commits that GitHub should allow people to make to repos that they solely own?
This is like an adult version of where's waldo
Yes indeed. People will think it is some sort of Linux distro.
>Github doesn't get to ban this guy because he took a dump in his own backyard.

Yes they most certainly do.

Also, his landlord gets to ban this guy because he was building bombs in his apartment.

https://abc7ny.com/suspicious-package-queens-astoria-fire/64...

https://www.qgazette.com/articles/more-charges-possible-for-...

https://nypost.com/2020/09/16/resident-of-nyc-home-with-susp...

https://www.reuters.com/article/us-usa-new-york-bomb/new-yor...
The UK is not under any real level of restriction, and the (own-currency) debt taken on is not of a form that would harm growth. Compared to its peers the UK is doing abysmally; the distinguishing factor is Brexit.
The benefit of having your dependencies vendored is that you have everything needed to build your application without having to download stuff from the internet. You get to ensure what exactly makes it into your application. Yes, it will increase the repository size, but I don't see why merge conflicts would be a problem since you are just replacing a file with a new version.
This isn’t about moving the market or efficiency. This happened before ETH was available on any exchanges. Lubin was explaining how to disguise large whales buying a big proportion of ETH. This has major implications, especially after the supposed move to proof-of-stake as few whales would have undue influence over the consensus.
It's a non-scientific term for a commonly-accepted phenomenon. Like a lot of other stimuli, the brain gets pretty used to filtering out constant background smells.

A lot of pet owners don't seem to realize the pet smells in their house because they're so used to them.

You see this a lot. People who live near smelly garbage dumps, in smelly cities, near farms that use a lot of manure, etc. They get used to it and stop noticing it.

I think we all experience some level of this. Everybody's home has a distinctive (usually benign) smell. But you usually don't think about it or notice it. Until you step into somebody else's home.
> UV LEDs can be manufactured to produce a very narrow spectrum centered on 220nm

Does anyone know of any manufacturer? I don't think they exist yet?
You're a real gerk.
If one uses a webview, then typically there is JavaScript running there that does non-trivial things. So the application becomes a mixture of JS and Flutter. That already defeats the goal of using a single language and framework to develop the application. And when there is a mixture of two, the value of Flutter is reduced, as the mixture can be as well developed as JS + Android + IOS.

For me the strong point of Flutter is not to use the webview in the first place delegating the latter to the original cases of showing help pages etc.
> ... it’s not obvious to me?

If the source was maintained on Bitbucket, why the hell would bitbucket nuke the developer's account access? That's not their problem what happens on NPM.

Github and NPM are defacto the exact same company on the other hand. Github actions are in retaliation of NPM "mispublishing".
FWIW he claims that was due to manufacturing concerns, specifically that only AstraZeneca would be able to be reliable and consistent enough to reproduce the related vaccine in a way that wouldn't cause potentially catastrophic adoption issues (vaccines actually killing people due to contaminants, etc.).
> if a giant wallet pops up or transfers out to known exchanges - meaning a sale is taking place

I’m rusty, but exchange deposits are probably to unique addresses and might not consolidate into known exchange addresses until after the sale.
Its been so long since I actually had to write anything... I notice my brain stutters and stalls when I switch from typing to writing. Its like an atrophied muscle. I just cant flex it like I used to be able to.
This is the most fascinating comment in HN history
GameStop Entering NFT and Cryptocurrency Markets
They couldn’t come up with anything else? Shit you could’ve just named it after some random fruit and it would’ve been better than this dungeon and dragons sounding ass name.
I'm not sure if assuming malice makes sense. If the OP of this post was busy coding they'd likely have missed the earlier post. In fact I'd guess that except for some people most don't follow HN that religiously.
Side note, why might someone want to earn karma on HN? I know people on reddit sometimes do it to sell their accounts but I'd imagine it to be much more pointless here.
I don't assume that at all.

I assume that GitHub now lives in Microsoft-liability-fear mode. Expect them to police commits in popular projects.
RIP, I watched a lot of Full House as a kid.
Resolution of the laser isn’t the problem. Resolution of the medium might be.
Except a majority doesn't mean too much, and even less so without the demographics. It's entertaining though – just like everything nowadays.
There is no reason to use the camera while the telescope is telescoping. From what is being requested in this subthread it doesn’t even need to survive past the initial unfolding, just get a pic or two and be done with it.

I’ve read the article and I’m not criticising NASA’s decision. I’m just pointing out that a cam wouldn’t need to bring significant complexity, not in the insane context of this project.
I got the form from the rental agency which directly debits from my bank account for the rent.
Moving social opprobrium from assumptions made based on look to documented speech and action? I don't know; that seems like a strict improvement.

In any case, these seem like two unrelated changes (West Coast culture of looks-acceptance coinciding with a global telecommunications and searchable data storage networkb that feed existing culture of lack of words / deeds acceptance).
I use Subler [https://bitbucket.org/galad87/subler/wiki/Home] and when it confounds me I opt for MetaTV or MetaMovie [http://www.appfacture.com/en/]. I've also heard of iFlicks but never tried it [https://iflicks.app].
This wasn't a "protester". It was deliberate sabotage, done with full knowledge that it would cause major damage. GitHub is with its rights to kick this guy off. It would even be within its rights to take over that account and fix the introduced bug (by reverting the change or otherwise). That wouldn't prevent the original developer from maintaining their own broken version, but npm and GitHub could eliminate it if they want.
Contact hypothesis
Argument Cultures and Unrelated Agression
This is a bad op ed and it's unmasked by this quote in particular

“Some of my friends and professors in science were saying, ‘Oh the people in sociology are trying to study us and judge us and tell us how to do better and be better people,’ and we were laughing at that seeing how silly that was because we’re the rational ones,”

The self righteous "rationality" of scientists and engineers can actually be a huge hinderance to them being kind and good and thoughtful people.

This whole argument of "well we better hope the guy who is gonna cure cancer isn't a republican" is so daft and status quo focused - the reason we're having this reckoning is because of the system exclusion of racial minorities and anyone but men in STEM fields.

What about all of the people who have been historically disadvantaged and systemically excluded who could have cured cancer? We don't need to pander to the racists in hopes of their contribution, we need to do better for all the people who never had a chance to contribute in the first place
It isn't your own if you host it with them, and they aren't obliged to help you commit sabotage.
In your bubble that might be the case, but that’s not necessarily true for a lot of other people.
I have the wart repo cloned into ~/tmp now and am quite fascinated at my first look but haven't dug into it enough to form any actual opinions.

I might remember to email you later but if there's somewhere on IRC you're usually connected to telling me where that is will significantly increase the odds of my actually getting around to providing feedback if you'd like that.
It's an acronym really, where the first word of the acronym is "graphics" :)
Damn, first Norm now Bob.

I won't speculate on his death, only say it's very unexpected to me in that he didn't come across as the drug or alcoholic type, at least in recent times. Seemed like a pretty healthy guy with a sharp mind.

RIP.
It's eerie to think how fast things can change.
You can fight for a pronunciation you prefer, but trying to argue that yours is a 'right' or 'objective' answer - that I think is misguided.
> if you know what the update contains?

I think anyone who thinks they're doing this is fooling themselves. You can review code for accidental vulnerabilities but if someone is trying to slip in a backdoor it shouldn't be hard to do so in a stealthy manner.

The reality is that the entire dependency concept is just broken. There is an implicit trust that all dependencies are equally trusted. Your logging package is just as capable of performing file and network operations as your http package, even if you assume it won't.

That's silly.

It is up to programming languages and package managers to solve these problems. They're also not that hard to solve, in my opinion. "Run arbitrary code on a computer" is a model we've been securing for decades with web browsers, both in terms of web pages and extensions, and now too with mobile.

Solving "this code can do X but that code shouldn't be able to" is similarly easy to solve with languages that support effects or capabilities.

It just hasn't been done yet.
a peer-viewed standard library is key, just like what glibc or libstdcpp for c/c++ that covers 80% of the normal use cases, the rest you're in charge for its quality check.

with javascript/node, you can write 100 lines of code then pulling 100 modules, it's quite different and hard to assure its quality and safety over long period of time.

I heard rust also has a very small stdlib, that gave me concerns, but I don't code rust, I do hope though all languages can have a stdlib that is 20% the size covers 80% of normal needs.
In Italy an average Gbps fiber connection costs about 25€ (about 28$) per month which is insanely cheap compared to other countries.

This also means that, at least for us, 99$ (88€) per month for such a thing is a lot more at the end of the year (+756€). I hope they’ll eventually adjust that price for different markets because at the moment it’s not even competitive in my area.
That's true, even though I'm not a business.

Would it be more cost effective to do a DO droplet? (haven't tried it personally yet).
A Programmer's Guide to Saving, Investing, and Retiring Early
Not to speak poorly of someone who died but anyone who watched his stand up comedy or listened to him on 'shock jock' radio would never call him "America's Dad". He got off on being the total opposite of his image on TV and being a 'wild and crazy' foul mouthed. drug using type of person.

Just like how he was in his cameo in Entourage.
Morals are (at least in part) based on generalising instinct. Most people would be instinctively repelled and outraged if they saw an adult torturing a child – morality is not that instinctive feeling itself, but when we reflect upon that feeling intellectually, especially when in doing so we universalise it, moving from "I am repelled and outraged by this, so I won't do it and do I what I can to stop others from doing it" to "everyone ought to be repelled and outraged by this, therefore nobody ought to do it and everybody ought to do what they can to stop others from doing it", that's when we've turned instinct into morality.

Is morality "entirely subjective"? When someone says, "Torturing children is immoral", do you really want to reply "That's entirely subjective". The very reply itself seems morally compromised, even immoral.

A good philosophical argument for the objectivity of morality is the "companions in the guilt" argument. Most people accept the objectivity of rationality, even those who deny the objectivity of morality. And yet, when we examine the two in detail, we can find a great many similarities between rationality and morality – morality says "don't do X", where X might be torturing a child, rationality says "don't believe X", where X might be the QAnon conspiracy theory; morality values states of affairs positively or negatively (moral vs immoral), rationality does the same (rational vs irrational) – in light of these similarities, how is it not special pleading to affirm the objectivity of one yet deny it of the other? To justify treating them differently, you'd need to give a good reason for doing so – but rarely is any reason given at all, and I don't think any of them are good. Rationally, we must either affirm the objectivity of morality or deny the objectivity of rationality. I think, to affirm the objectivity of morality is the better horn to take – we might even conclude it is the more rational one, if we believe that rationality itself requires belief in its own rationality. Hence, morality is objective.