skysight-inc/HackerNews huggingface dataset:
I disagree, but appreciate the explanation rather than vote and run.
If a dependency includes it's own yarn.lock yarn will ignore it. It DOES respect the local lock file though, so it's not all bad.
Yes, but ...

At a high level the article is correct. At a tactical level there are a few issues:

* If you don't have a "geothermal" system, heat pumps aren't economical in regions where it gets below 0F/-20C.

* There is a 20 year depreciation cycle for furnaces, and it doesn't make sense to install them at a significantly faster rate.

* You lose a lot of the efficiency benefits when the electricity is generated from burning fossil fuels elsewhere. And we are nowhere near having enough electricity from solar and wind to heat houses in the wintertime.
My preferred fix for Yarn dependency tracking is to use zero installs[1] as there is no command to run and dependencies can be exactly what ships in the repo and nothing more (with the right flags). If accepting PRs from third-parties, the check-cache flag can run in CI to validate checksums from untrusted contributors — plus, you know, reading dependency source code when you have the time or reason to do so would be great within a PR review also.

I wish more tools were able to concisely show you the differences between dependencies, but… sometimes dependencies have binaries and at that point you might need to fork or clone and build your own version of a dependency. I’d suggest only using dependencies when you can read and understand the code, but there are always limits. I can’t think of the last time I thought of a glibc dependency except when using Alpine or compiling something for Cgo. But it’s still something to keep in mind: that sometimes your project will be simpler and easier with fewer, smaller dependencies where you can read the code in full.

1: https://yarnpkg.com/features/zero-installs#does-it-have-secu...
Wow! Thanks! :D

Please ignore the haters, they have little to no idea. :D
Is it any comfort that we might be staring down financial collapse that crushes consumer electronics?
Older ones stop working at around 32F. Modern ones meant for colder climates start losing efficiency at 0F. I live in Maine, we rarely get nights that are subzero, my heat pump works fine except for those 3 or 4 nights out of the year.

The heat pump dramatically decreased my power bill vs baseboard electric.
Sometimes when I want a visual representation I use Apple's FileMerge, but for everything else I just use diff and patch.
Bravo!

This comment might as well be Peak Hacker News.
Age zero. Fat people have the most diet advice.
> All models are wrong. Some are useful.

While this may hold true in almost every case. Just as truth is not absolute, neither is "wrongness".

Furthermore, there exists some model which is neither right nor wrong[1]

[1] https://publications.recursion.is
"When all contradictions are resolved what will be left is - an unprovable truth"
I'd argue that Proton is better than native Linux support in the long term, hear me out.

Linux userspace API has no promise of long term compatibility, and in fact there's a lot of churn, especially nowadays as we approach the Year of the Linux Desktop and technologies come and go as they're improved.

The Windows API instead is known for its long term compatibility. Microsoft goes out of their way to ensure applications keep running a decade later, and using that as a base for gaming is a win-win, as developers can target two operating systems with one API, and gamers have more guarantees their game will still be playable on Ubuntu 2030 edition.

The last few times I played native Linux games I had to fish for old and unsupported libssl and libjpeg libraries that my distribution doesn't ship anymore. I can blame the port, but nowadays I just try the Proton version first.
Yes and no, it depends on what you're considering petty property crime.

Someone breaking into my house to steal something while my family is home? They're getting shot in the forehead. I don't know their intentions, nor am I going to assume the best of intentions.

But I agree, SWAT in response to this is overboard. I would've been glad to see the author get proportionate repercussions (perhaps his Github/NPM accounts being deleted) as we know his intention, but putting his life in danger is too far.
From the Bible, in the book of Proverbs (paraphrased): "The wise person gets a lot of advice".

One chapter later, also paraphrased: "The fool listens to most of it".

Or as someone here said, "Advice is free, until you take it".

Curate advice very carefully. Listen to it all, but don't act on most of it.
Wouldn't it be more practical to do development inside a container or VM? Locking deps won't be enough if you haven't also audited them.
I wonder if you would be willing to share how it worked out with Oxide? Did you submit the candidate materials and go further into the process? Of course, feel free to ignore these questions. :)

I (like many people around here) think Oxide looks like an awesome place, but I was disappointed to discover how onerous their initial candidate screen is. For me it's just a huge risk to put in a lot of work for a single company because they may (for whatever reason) not follow up afterwards.
I appreciate your thoughtfulness, and someone who thinks deeply about things with a touch of self-deprecation is the exact kind of conversation I enjoy at parties ;)
A long time ago I wrote a CAD system that ran on DOS and generated G-Codes for CNC machines. One of the features is that it would show the tool's path and it cemented my love for trigonometry. You seem to have found something you love too - kudos for chasing it!
Seems likely that destruction of habitat is to blame not eating them.

Same difference I suppose
> for example Cyberpunk 2077 performs on Linux better than on Windows now

Do you have a link? Everything I found suggest that it's the other way around, but Linux comes close.
Cruise is actively running a driverless robotaxi service in SF, so your assertion is at least partly wrong.
Unfortunately I think you are laboring under a false premise, namely, that folks in the U.S. are "regular people." With our (relatively) clean air and water, room to spread out, big houses, big vehicles, etc., we are all elites compared to the majority of people in the rest of the world. Compare against most of the world who get by on far less than we do: they don't have huge vehicles and homes; they don't eat much beef; etc.

So it's not about elites vs. "regular people" here, it's about middle-class elites vs. other middle-class elites fighting over whether Johnny gets to buy and use the toys his middle-class income gives him the privilege to play with, and what kind of sacrifices we will make for the greater good. It's not regulation that is causing a cultural backlash: it's intentional and insidious cultural warmongering by a largely silent but even-more-insidious class of elites (the uber-wealthy) who fund think tanks, hire armies of lobbyists to press Congress, and discover and fund media personalities such as Rush Limbaugh and Sean Hannity to pit Americans against one another and keep them distracted away from the even bigger issues we face. Democratic and existential crises are just collateral damage to the interests of these people.

This war of the narratives traces its roots to the 1960s, where the country was beginning to come to grips with racism (Civil Rights Act) and the Vietnam War. White middle-class and Greatest-Generation fear of hippies, Blacks, homosexuals, atheists, and others was easy for politicians and monied interests to leverage. Soon, think tanks and lobbyists started pressing Congress (along with the backing of Reagan, who was propelled to victory by the Moral Majority who brought politics into church) to deregulate the airwaves, leading to even more divisiveness in the media. Communication consultants like Frank Luntz (author of the so-called "death tax") were hired to sharpen the divide.

And Americans are sadly and unwittingly falling for this manipulation, hook, line, and sinker. Now it's the freaking Baby Boomers (who were part of the '60s counterculture and became the very thing they fought against) who are ensnared in it, and I fear my fellow Gen-Xers are being also being led into this trap.

I, for one, refuse to accept that any way other than massive world coordination is a pointless exercise. Major change is often the aggregate of small changes anyway. And being willing to make sacrifices in the name of health before others do (especially others who can less afford to make such changes) is what admirable and moral leaders do.
Chernobyl is along one of the very few roads into Kyiv from the north west of the Dnieper. If you're trying to surround Kyiv, you'd be very hardpressed to avoid going by Chernobyl.
I don't understand the comparison. Isn't meld free?
Heat Pumps are great, and the latest generation of variable speed units are really cool and our most efficient ones yet.

Still, for heating, especially in really cold climates, a Heat Pump is going to have a hard time competing against other approaches, in efficiency, efficacy, and cost.

The latest gen of "ductless" or "mini split" units are awesome *AC* units (efficient, quiet), and I'd definitely recommend checking them out for cooling. If you're somewhere that it doesn't get too cold in the winter (lows in the mid-20s at the lowest), you might be able to tolerate using one for heating, but any colder and you're going to need another solution.
I assume the author is talking about the following problem:

I build library X and ship it with a lockfile to lock all transitive dependencies.

User installs library X, even though I ship a lock file, it isn’t respected. (I assume this makes Resolution way to complex)

If you ship a library where everything is locked, one should consider vendoring their dependencies. I think this is what npm does itself. (Or used to do). Or consider reducing your dependencies.
To expound on this, we've still yet to have a president who doesn't identify as Christian. I don't think we're particularly close to a point where a self-professed atheist could get elected president either, although I could see someone of another mainstream religion getting elected in the not too distant future.
Meld gets so many things right.
It depends on the user I suppose. I use the `git diff` and bare `diff` and `patch` commands which works fine for me, but there are a lot of people who either just don't like it or don't want to dive that deep into those tools.
Anyone outside of Microsoft uses this Linux distribution? I'm just curious because if you would have told me that Microsoft had a Linux distribution 20-25 years ago, I would have laughed.
> Pornhub's problem wasn't sex. It was revenge porn, authentic rape videos, and all the other content you will host if you allow anonymous uploads.

Meta/FB/Insta/Whatsapp/Messenger were & are responsible for facilitating significantly more of all of the above terrible things. Of course the problem was sex and that they are a vice company, it made them an easy moral outrage target.
You'd think they would want to double- and triple-down on their cloud gaming platform, Stadia, for Chromebooks. But there's also good reason to believe that platform won't be going the distance so perhaps this is another signal in that direction.
ah ok so as a library author you can't actually enforce _your_ assumptions about transitives, bc user of the library local lock file overrides but as a library user with a local lock file that I craft and care about it is effective. That is a relief.
This looks as though Jared Diamond's theories being taught as fact. I read guns germs and steel and came away unconvinced. His theory on Easter Island has been pretty much debunked too.

There's something really strange about that curriculum, it seems to have a racial agenda rather than a factual one.
My question is about publicized hacks of any kind, which I’d still call “security breaches”.
A show I've been watching consistently (about 5 seasons) is Port Protection.
It's all about the day to day existence of people living a subsistence lifestyle in the town of Port Protection, Prince of Wales Island, Alaska.

I often wonder what it would be like to live that life without the money pressure they have. Where you're not trapping beaver to pay for bullets, so you can hunt deer to have enough food for the winter etc. There are lots of other shows like this ("The Last Alaskans", "Life Below Zero", "Yukon Men" etc).

https://www.imdb.com/title/tt4838586/
Well, I assume that means "every file on the system that Node can access", and on a sensibly configured system I hope Node can't access that many important files - and the files Node can access are either in some git repo or backed up regularly?
politically stable for now. how long is the average period of political stability?
Desktop computing is still too permissive for random bits of software. It's unreal that some random package you didn't even directly install has the ability to wipe your computer and steal the login cookie for your bank. Further work needs to be done to sandbox applications.
On the other hand, tech in the classroom has never been demonstrated to improve educational results at all, other than for various disabled kids, who have been helped by it.
(If you know, of course:) How well does org-mode play with Pandoc? Much of my workflow goes from Markdown > LaTeX, and Pandoc works pretty well for that. Thanks!
This is a great and often overlooked/undervalued point. Purposefully sabotaging machines through code repositories should be considered spreading malware & be subject to civil & criminal lawsuits.

Edit: I think I would actually like to see a lawsuit come out of this example.
"The Ur-Fascist hero is impatient to die. In his impatience, he more frequently sends other people to death."

Sounds like a perfect match for atomics...
Not to mention advertisers, but could it be that most users don’t actually want porn and solicitations by sex workers showing up in their Facebook and Instagram feeds?

There is no shortage of places to find porn or sex workers online, for those who seek it out, including on some popular social media sites. It can be difficult to even search Twitter without getting a close-up photo of someone’s genitalia in the results. I don’t think it’s necessary that every social media site becomes a platform for porn and sex work.
To be cost efficient I bet it would be "not stopping".
Value level information. The compiler statically knows the type that's being matched on. It's true that the generated code depends on the type, but that's not any more true than when a C compiler generates an integer comparison vs a float comparison in the conditional of that "if". All that's looked at at runtime is the data.
This whole conversation has nothing to with what I said. I’m mostly talking about massive taxes and light fiscal policies that are basically transferring wealth to people with access to capital
FitM, the Fuzzer in the Middle, fuzzes client and server at the same time
Amen on semver. If you start pulling at that thread, the npm people start realising what a big mess they’ve gotten themselves in.
The maintainer needs to go to jail. They knowingly distributed malware.
Kids belong outside running around, setting up their own kickball games, building forts, skateboarding, etc.

There's a picture of me outside as a boy wearing shorts, and my shins were bruised from ankle to knee. Obviously, I'd been out having fun :-)
So not backups but better than nothing. It would have solved the stated problem of ‘a source file accidentally got deleted’.
Off topic, but thank you for the link. There are some very good talks there. I'll give a brief summary of 3 I picked to watch.

https://media.handmade-seattle.com/roc-lang/ [1], https://media.handmade-seattle.com/metadesk/ [2], https://media.handmade-seattle.com/practical-data-oriented-d... [3]

1. roc-lang by Richard Feldman. A high level pure functional language with low level language performance in runtime and compile time. Looks like the holy grail, but it seems like it'll be a few years to see if it lives up to that.

2. github.com/dion-systems/metadesk . A DSL/meta-data format that is a superset of json for that is more readable and does not encode data structure like json.

3. Some good tips on designing your data structures for efficient memory usage. I won't call it "Data Oriented Design" based on the things in the talk. The sudden exponential jump in "good" code after years of plateau leave me disappointed overall. I don't see how the code can have an exponential jump in "better-ness" based on topics in the talk.
Yeah, but once we had the proof we realized that the conspiracy theorists around the world wouldn't recognize a real conspiracy it it hit them on the head.

Why do you think the UFO and Area-51 conspiracy theories peaked around that time? Because it was always about keeping your head in the sand, while believing you are enlightened.
Have these people been on the Internet?
Regardless of whether I agree with you or not: his shitty method for identifying Russian computers would also target some IP addresses in Eastern Europe outside of Russia and Belarus.
> I do respect and idolize the winners.

Don't do that, it's toxic. Everything becomes about winning and losing and that's how you end up with an opioid epidemic.
Provocative view but, I'm thinking that if you have a job today and you aren't doing at least one interview somewhere else per quarter, you are one of the people enabling crappy interview and hiring practices in the market because you aren't using your leverage to engage the interview process and walking away as a candidate when it doesn't meet your expectations.

If you want better hiring processes and jobs, use your job as leverage to interview more.
Well, 32F is 0C if we're going to go that route.
It's not new, AMD has been doing this for a while with their Infinity Fabric technology (and before that, technologies like SLI and Crossfire achieved the same thing on a software level), and you've posted about it several times already. It's also not much of a "feat", since it was done by a company with 200 billion dollars in liquid cash that could probably cure cancer if they wanted to. Not only is it completely uninteresting from a technical standpoint, it's also something you've repeatedly posted on threads that outline the downsides of doing this (like yesterday's benchmark results, showing how strapping 2 M1 Max GPUs together doesn't yield twice as much compute power).

Frankly, it's annoying, and pretty far from intellectually stimulating. What is there to discuss anyways? Do we all need to pat the world's largest tech conglomerate on the back for doing the same thing as other companies did 6+ years ago, with worse performance results and misleading marketing material to boot?
It must be said, most of the C++ is very bad C++ code. It would be an overwhelmingly more effective use of developer attention to upgrade or replace old C++ and C with modern C++ than to rewrite them in Rust. In many cases, the existing code would be upgraded in place using modern constructs, but much of the C++ is really lightly-rebranded C.
Do European students run critical infrastructure? Because that's where the real problem is.
It’s funny, we can enumerate the possibilities without the false dichotomy holding up this article.

https://www.ft.com/content/e2663cb2-d1ad-4c67-bbbf-dda0330da...
NPM tells me that just about everything is a security issue. Apparently my linter has a critical security issue because I could put a malicious regex in my own linter config causing it to waste cpu..
Which also means the Great Belt Bridge is no longer the longest suspension bridge outside of Asia either.[1]

[1] https://en.wikipedia.org/wiki/Great_Belt_Fixed_Link
The goal was to shut down online prostitution; trafficking is just a performative excuse.
Stop thinking in terms of abstractions (countries, nations, sovereignty, citizenry) and think in terms of people. People born into, living in the area of the Earth currently called Russia. Those people, each the equal of yourself, are what you call harm upon. It serves absolutely no purpose. What, you want everyday life to become so unpleasant for people that they take a flyer on a violent revolution to overthrow their government? You wish for them to plunge their country into civil war? And you cover this call to purposeless cruelty with emotional garbage about fathers burying daughters.

This idea that since some people in a country support its foreign misadventures they're fair game is the exact same reasoning employed by Osama bin Laden in his infamous Letter to America: https://www.theguardian.com/world/2002/nov/24/theobserver
I actually started tinkering with Dear Imgui, very cool library! From your experience, does this approach scale for complex apps with a lot of data updates, with dozens time series visualized, edited, etc., or am I overthinking?
Targeting certain countries could be considered as act of terror. And reasonable standard in USA is to answer this with either drone strike to home or place of work of the terrorist in question.
I don't know how true this is since I'm no expert, there's a YouTube video explaining why heat pumps may not be so simple a solution at least in the UK

https://m.youtube.com/watch?v=GhAKMAcmJFg

Interestingly the prediction he made, regarding gas prices, did come true.
> The US is a "light theocracy".

That's not remotely close to being true. The US has among the strongest separation of church and state laws of any nations and they're well protected decade after decade. If the US were actually a light theocracy, the conservative majority Supreme Court would wreck the US promptly with crazy theocratic changes that would make Iran blush. It was the first nation in history to explicitly codify such a strict separation in its constitution as well. Those separation lines have, on average, been made stronger over time.

You can dislike the Christian culture that exists in the US, certainly. It hasn't made any consequential inroads into state in two centuries, in fact the opposite is the case: Christianity (and religion more broadly) has been pushed back out of US life in numerous significant ways (and properly so; eg: gay marriage, abortion rights, making it illegal to discriminate based on religion, acceptance and ease of divorce, sunday alcohol sales & business activity, drug legalization laws, press dominance and positioning (the press is ~95% left-leaning now and very much not religious in nature)). That there have been occasional set-backs in things such as abortion rights, doesn't nullify the overall point. Religion has been losing political and cultural ground in the US for a long time and that's likely to continue. Religion used to dominate US life and heavily factor into US politics, as recently as the post war 1950s-1980s era, and that is no longer the case (the left for example is drastically less religious than it was just 40-50 years ago).
What an uninteresting point of view. I don’t have time to be enraged about this
Here's the list of the text replacements from the post:

https://pastebin.com/raw/2CG1Cdn6

(HN filters most of the emoji making it pointless to paste here)
How is your comment peak HN?
Also, this includes ASM by lines of code, and ASM has very short lines, so it's arguably over-represented (although LOC is a very vague metric anyways).

I wonder how much of that ASM is for JIT compilation, and how much is for stuff like fast media decoding.
The Many Faces of an Undying Programming Language (Thoughts on Lisps)