skysight-inc/HackerNews huggingface dataset:
I disagree with the fundamental assertion that 2d is harder than 3d. I think a more accurate title would be "Why are 2D vector graphics so much harder than 3D when using a 3D-oriented raster graphics pipeline?"

If we remove the existing constraints and say you have to build these things in pure software, I think the equation would look a little different. I don't know of many developers who can accurately describe what the GPU does these days. Triangle rasterization is not an easy problem if you have to solve it yourself.
This is what happened in big cities in India. There was so much demand and apparently few regulations, so builders just kept building huge apartment complexes which sold for millions of $. Then at some point the demand was satiated and prices didn't increase in the last decade or so as much as they have in Europe and NA + Aus/NZ.
Tell that to the inhabitants of Easter Island.
To be fair, gas isn't just used for heating. Germany needs it for industrial work, as far as I know. But yes, heating alternatives are available aplenty.
There are also seven pirate bays.
Going fast, by investing deep (Demystifying the scrappy tech startup myth)
I think we are missing some contexts here. I have been trying to find more information about them. From what I found [1] (hopefully accurate) it looks like they are a new team - Beta in August 2021 and just incorporated in this February.
The founder/CTO is a full stack developer. I speculate they are a very small team (1-2 developers at the most) and a relatively straightforward architecture. In that context I suspect it is quite feasible to go from local to production without going through staging: They are likely to have a self sustained stack that can be packaged; they don't have a huge database or collection of edge cases; they have few customers, low expectation in terms of service level; they don't have stakeholders to review and approve features done (they are their own bosses). I emphasize with where they are, I have been in the same place at some point. It will be interesting to see whether this is sustainable without staging, or for how long, as they grow in team and offering.

[1] https://www.indiehackers.com/product/squeaky
Nope. It was a crazy stored procedure. When all you know is SQL… you’ll solve some crazy problems using sql.

Oof. That tbh sounds worse
A couple years ago, politicians in Poland wanted to do a quick change to the country's universal pension system. The change had to be quick to score some kind of political win. They wrote the new law and went on with quickly pushing it through parliament. To their surprise, sometime along the legislative process , the contractor responsible for maintenance and changes in the pension system informed them that they can indeed implement the change - by June next year. The politicians learned that, in the mordern computerized world, just passing a new law does not change how the state bureucracy operates.
The Android app seems to require google play services. Quite ironic for an app that wants to give me back control of my data. I think this defeats the purpose of the app if I take steps to reduce my dependency on google services I might as well go the whole way; Whats the point of half measures like this. Checking the issue tracker the devs do not seem to agree, a shame really the app seemed interesting at first.
It's not like office networks are a security paradise either
A lot more secure? In what ways?
Production and Supply-Chain Update
But stirrups hd already been available in Europe for hundreds of years prior to the Mongol invasions
Machu Picchu has been called the wrong name for over 100 years
Great, so milk wine. bllaarrgh emoji
The feedback isn't to me.

Also, I live in northern Europe. Generally feedback is direct, but respectful. Calling something silly is usually (but not always) out of bounds. European-style feedback might be: "I'm surprised you did not use X because it perfectly matches your use case."

Or "Great feedback but I wish it could have been expressed less dismissively"
What's this have to do with children
You wouldn't run or develop code locally. AWS keys would be secrets managed by Vault or something.

If you have AWS keys on staff laptops at home, you've already failed.

We don't allow any code at all on local machines.
Bezos Business Card LaTeX Template
Will the person on the other side know that I'm using this extension?
The real world don't care about feelings.Feelings are extremely subjective making these kind of statements quite vague.

As a person with alexithymia, this is so confusing, I have no idea what "feels good" is supposed to mean. I know it's not bad, but that's a big spectrum of meaning. Good doesn't mean great or brilliant either. Just confusing.

Emotional blindness: https://en.wikipedia.org/wiki/Alexithymia
We[4] have a few[1] guide[2] articles[3] in our docs which might give people some ideas on how they can be used.

[1] https://docs.flagsmith.com/guides-and-examples/mobile-app-ve...

[2] https://docs.flagsmith.com/guides-and-examples/staged-featur...

[3] https://docs.flagsmith.com/guides-and-examples/testing-push-...

[4] https://github.com/Flagsmith
This sounds like an organisational issue, not a technical, and I predict that this simply won't scale organisational-wise. It sounds like they have given no thought about their platform architecture, deploy pipelines, testing strategies, ... It's probably not yet causing issues because they're working in a small team, but rectifying this later will be an absolute pita.

That said, at scale, having a big staging/test/... can be impossible, but then things are split up organisationally, each team managing/service group/... managing their own environments, being responsible for the reliability/stability and availability towards other teams.

Also, with service meshes it has become feasible to actually test in production so you can let select users end up on specific (test) versions of a certain backend service.
How does one get access to the direct URL to such a file?
Yes, but it is reality for millions of public servants and hapless consultants like me.
If I may: Facebook's user numbers have actually started falling [0], so your third sentence is incorrect. Your first two sentences make a decent point, though.

[0] https://www.bbc.co.uk/news/business-60238565
Containers are really a kind of process-isolation - you still share a kernel. You can find a lot of people saying that containers aren’t enough for running untrusted user code.

If you run a fully virtualised instance you get your own kernel and aren’t relying on process isolation.

Would you be happy if your cloud provider was running your containers on the same virtual I stance as someone else’s? Most people wouldn’t be.
KeePassXC is the exception to this. It is open source, and doesn't rely on another service (you can just put the file in Dropbox or something). Anybody who is seriously about security should be using it.
I had previously used SSE in a project and had no idea it existed or that it was widely supported by most browsers. It's a beautiful and straightforward technology, but it doesn't seem to be as widely used as it should be, and more tooling is required. Also more tooling is required.
I assumed you're Ukrainian and you're involved in or supporting the protesters of Euromaidan. I ignored your insults because I assumed your emotions run high due to your fellow citizens being killed and your cities being shelled and bombed into smoldering ruins.

If you're not, then you're just a mindless troll, and HN guidelines say that I shouldn't assume the latter.

I feel bad for trying to have a rational conversation with you.
> who care about large legacy code bases

It's clear that Python's main strength is its vast libraries, priority number one is not breaking them. If it could be possible to speed up Python without breaking changes I would be surprised precisely because with so much large codebases speed and efficiency would translate directly to money.
Ah OK thanks. I'm still going to assume you have an 800lb deadlift though, because surely it is something in the water there haha. If you haven't heard the name before, you should check him out. Nothing short of a specimen.
A more reputable source in french:
https://www.francetvinfo.fr/france/cherche-cocottes-minute-p...

A witness in this article adds that "every nuclear facility in the world use them"
I am German and I don't think I have ever really noticed this. Even though they are the same words letter by letter, they are still two completely separate words conceptually, i.e. Geschichte is not understood to generally mean story and sometimes in in a certain context to more specifically mean a story about the past, i.e. history. The origin however may be exactly this, but I don't know that.
True, but that's DAU, I was talking about MAU. And it dropped from 1.930bn to 1.929bn, so somewhat insignificant.
QuickLZ – World's Fastest Compression Library
So I'll start by saying that security is always relative and what's ok for one environment won't be for another :)

The challenge with Linux containers as used by Docker/Containerd/CRI-O et al, is that containers run against a shared Linux kernel. The Linux kernel has a very large attack surface, so it's easier for attackers to find some way to bypass the restrictions it tries to enforce. If you look at this year there have been several Local Privilege Escalation issues in the Linux Kernel, some of which have allowed for container breakout.

If you compare this to a hardened hypervisor (e.g. Firecracker) there is a much smaller attack surface visible from inside the container. It obviously could have a breakout vuln. but there is a lower chance of that occurring.
I would use the built-in HTTPs libraries in either Node.js or Deno. Maybe with Express.js or Fastify if I think I need them, but for simple CRUD I think those layers are usually unnecessary until you have many endpoints. Usually it's not a big leap to migrate to those since they also use the built-in request and response objects. The language really doesn't matter, though. If it were Ruby or Python then I'd choose their respective HTTP modules in the standard lib. Receive JSON, respond with JSON. Done.

For storage, SQLite is almost certainly the way to go by default IMO. People underestimate the capabilities of SQLite. Chances are it not only does most if not everything you want in a performant way, but it also scales very well. I might also go with CouchDB if I feel like it fits, and because I just find so much to like about it.

If I need webpages to be rendered, I'd use the Svelte compiler on the backend to SSR the components into HTML. Doing it from scratch requires a bit of work but not overly-so; I've done it 3 or 4 times with my own personal projects. That way you can not only render HTML in a very straight-forward way but you can easily rehydrate on the frontend if you need component behavior to run in the browser.

The end result of this is that you have few to no dependencies other than the language runtime and you understand the app in and out. I've been downvoted in the past for suggesting this approach, but I stand by it. No, you don't need a framework unless a framework is called for. I prefer to start with the minimum to get the job done and then work up from there. This way I can do what I want and not run into a situation where some other developer's nebulous definition of what makes something "middleware" get in the way. Separating business logic from "plumbing" logic helps when it becomes necessary to transition to a(nother) framework.

Rails is great and all that, and I started my current career in Rails, but in many cases these frameworks are just too much. Even the scaled down ones like Flask, Sinatra, and Express.js can be more than is necessary. An understanding of web security is kind of a requirement, and it takes more work to do things like CSRF tokens (as an example), but in my opinion it's worth it to know those things intimately earlier than to rely solely on prebuilt libraries without understanding what they're doing for you.

Of course there are exceptions. Don't re-implement cryptographic routines from scratch because why and also because you will screw them up. If I can screw up CRC8 then you can screw up BCrypt.
I thought house sized solar panels were at best 300w. 17kw of solar array seems like a lot - I'd love to see how much space that takes up.
As I understand it, masks with exhalation valves only exist because that design works fine for masks intended to protect the wearer from spray-paint (and similar industrial hazards). That design was never meant for use in a respiratory pandemic.

There's no shortage of normal (no valve) N95/N99 masks.

> based on this, the cloth masks, bandana's, gators etc need to BEAT an N95 with an exhalation valve to be considered effective

A good point, but it's not the only perspective on this.

If we consider that only some proportion of the population will be wearing N95/N99 masks, it benefits everyone to insist that those masks not have valves. Of course, if people aren't fully aware of the rules ahead of time, this is undermined.

Or a less utilitarian angle: to deliberately build (or buy) a mask with an exhalation valve is to deliberately introduce a feature which increases risk to other people, for no appreciable upside. There should be real push-back against these designs.

Seems to me the airlines/airports would do well to offer a vending machine of non-valve N95/N99 masks at reasonable prices. Do any of them do that?
I'd say the keylogger can be an issue if they're able to be alone with the computer for a while. I'm not sure that all laptops can detect that they've been opened (my HP Elitebook and previous Probooks don't), but I'd assume it unlikely that the attacker wouldn't leave other traces in the house.

But other than that, enforcing session auto-locking should work fairly well. Of course, if this is combined with some kind of agent that checks whether you're doing something that the employer defeated with a mouse jigger, all bets are off...

They can also enforce using MFA for AWS (and probably for GCP and Azure, too, but I don't use those) and not use plain access keys.
Yeah batched arrays isn't the way to go when when you want to mimic what you would get from a traditional message broker. This really should be a spec that builds on SSE but specifies the encoding (CloudEvents) and parameters to negotiate the serialisation (JSON/Protobuf/Avro) and lastEventId, then it would be much more useful.
To add another example: I've used Google location data in the past to geotag vacation photos from my camera
> Everyone should be living much more like the most wealthy people in the most wealthy nations are living now. It should be considered a moral abomination that billions of people are not living in multiple story homes with robotic assistants to control their lights, security, doors, air-conditioning and the temperature of their pools.

As with the rest of the article, I'm really not sure if this is irony or hubris? If everybody had these conditions of living, we would either need a larger planet or a lot less people on it.
I used to think Yes Minister was the least humorous comedy on television, and I could not for the life of me understand why my father liked it so much.

He lived under communism, with its dozen+ levels of government bureaucracy, so you can imagine why he thought it was hilarious.

Once I had worked as a consultant for government departments, I suddenly "got" it, and now Yes Minister is one of my favourite TV shows of all time. The bit about hospitals is all too true.

For example, just recently, I had to fill out a stack of paperwork to provision a virtual server for hosting an archived, read-only web site for data that hasn't changed since 2017 and has three (3) users. Literally a stack. As in, a pile. About a hundred pages, or a short novel. That nobody will ever read, except if the time comes to blame me for a shortcoming that they themselves could not have avoided.
The Cathars were mostly tolerated by the local authorities and nobility in the south of France though. The Albigensian were basically a land grab by the nobles in northern France in expense of their souther brethren and nothing more (why would the catholic king of Aragon and the count of Toulouse fight on the side of the Cathars otherwise?)
Without necessarily wishing to call into question your source on this particular occasion, it is of course in SAP's interest that as many as possible believe this to be true.
I guess it has been a while since i last checked objective-see. Last i was there, i was considering installing Lulu instead of Little Snitch, but felt the overall user experience was better with Little Snitch.

Seeing that they've made a whole host of privacy oriented tools surprised me a lot. I will be trying out a few of them.

Thanks for sharing.
You know, this might not apply here but lemme contribute this:

Recently at my place of work we were required to take some diversity training. In this training we learned about high context and low context regional and familial cultures. High context individuals convey and respond to indirect details and nuance, while low context cultures are more direct with what they receive and convey.

Learning this helped me a lot and I notice these differences often, as I too come from a different cultural background than my team mates.
Did you implement CRDTs manually or depend on yjs?
Ask HN: What are problems AI still can not solve?
... and the shielding to keep you safe from it and the fact that you need to package it into smaller chunks to prevent criticality, etc.
Where is the codebase kept then? Do you have to remote desktop in to your development environment?
I cannot think of anything supercritical...
The only way that you can create stable and safe systems is by introducing processes to ensure that your systems are stable and safe. It doesn't matter how much personal responsibility you claim to take, you are going to make mistakes, and processes are the mechanism for limiting the damage of those mistakes. This is core to the best practices behind any safety critical industry, and is embedded in functional safety. The logic of this article appears to be "We just concentrate very hard to make up for not having a decent staging environment". Which is fine if no one cares if your stuff breaks.

>When there is no buffer for changes before they go live, you need to be confident that your changes are fit for production.

This is just completely wrong headed. It's like saying you should learn to tight rope walk 100 metres from the ground because it's going to make you concentrate on not falling more. The solution for making mistakes isn't to increase the fallout of those mistakes. You can absolutely build a culture where you value putting the onus on the developer to make sure they have a sense of responsibility for keeping master clean and working, without abandoning the processes that help mitigate when you fail to do that.

The funny thing is, that when you see articles saying the opposite of this, almost always they will also say "over the course of X months, our new staging environment caught Y additional bugs that would have impacted production". I'd love to see the same here - some actual data on how much they "We're just going to concentrate harder" impacts production.
This is exactly what I did for a research project in school: download Wikipedia, extract all combinations of iirc 2-5 words, do a few transformations like adding a lowercase variant and space-less variant, and run that set against the LinkedIn sha1 password dump. Quite effective for cracking passphrases that weren't randomly chosen words but an existing phrase.
https://apple.stackexchange.com/questions/157424/what-are-ap...
This made me all warm and fuzzy inside that nerds can still help other nerds even when we are on different teams. Hope y'all are able to share some ideas.
Also highly recommended is https://acoup.blog/2020/12/11/collections-that-dothraki-hord..., a blog by a military historian
A typical password manager is BitWarden or LastPass which is on the cloud and only requires your master password.
> I always read these articles as having a subtext of "EVs are crap at the moment give 'em another decade" which I don't think resonates with me but is likely popular with certain segments and so gets clicks.

You should introduce that certain segment to the Briggs & Stratton stock price :)
> A settler on Easter Island stood beside the island’s last tree. He or she looked around the treeless horizon, every one of those trees removed by man, and chopped it down anyway. Afterwards, the island died — the nutrients washed away, the landscape stripped. The population collapsed into warfare and cannibalism.

I have always had a hard time believing this story. It assumes these Easter Island people were really dumb and irrational. It might be that this story is not what really happened.

> It is a compelling tale, but may be completely false, according to research published yesterday. The Easter Island population did collapse, not due to this “ecocide”, but instead something less remarkable: the arrival of Europeans, bringing syphilis, smallpox and slavery.

https://www.thetimes.co.uk/article/european-disease-led-to-d...
100% onboard with better tooling.

Starting with out of the box swagger support: https://github.com/OAI/OpenAPI-Specification/issues/396

Shame they are not interested in adding it.
I like the embossing because it gives my thumb something to grip when I'm pulling the card out of my wallet.
Perhaps the time problem can be handled with an eventually consistent Lamport clock system
Downloading Guarda or Trustwallet is not that complicated.
Where exactly in the Middle East?
You can practice this stuff to make it less stressful. If you aren't willing to do that, it's not the employers problem
Great story. I would love to try instaminutes.com. Can I share the meeting notes?
To say it with the words of some guys in management why they picked alicloud: it was cheap :)
Six to Start | REMOTE | Full-time | Android or Android/iOS Developer | https://sixtostart.com

Six to Start is looking for an Android or iOS/Android native developer to join our existing team of two iOS and two Android developers.

Our flagship apps - Zombies, Run! and The Walk – combine innovative real-world interaction and gameplay with captivating stories and design. They’ve been selected as Editor’s Choice by Apple and Google multiple times, and praised for their innovation. In short, we make exercising fun. We want to find someone who can help us maintain and improve our existing apps and develop new experiences that are just as revolutionary.

This is a fully-remote position open to all locations, but you will need to overlap with at least 9am-12pm UK time.

Apply here: https://www.sixtostart.com/onetoread/2022/mobile-developer-2...
My favorite story about him was when he caught a student sleeping in his class. He paused, mid-sentence, and asked the student if they were too tired. The student looked up sheepishly and confirmed.

"Did it get a bit late last night? Can't keep your eyes open?"

Again, the student agreed. Rolf flashed a huge smile and in a singsong voice said "then I have something for you!". He walked over to his bag, pulled out a stuffed animal and a tiny embroidered pillow. (I have a grainy photo of them somewhere).

Rolf tiptoed up to the student, put the pillow in front of him, and as the student rested his head on the pillow Rolf gave him a pat on the head.

After this Rolf went back, said that if you're that tired it's better to sleep in your own bed. He resumed the lecture, picking up in the middle of the sentence where he'd stopped. No one slept in his class for the rest of the course.
I recently had to build a simple CRUD webapp in a very short timeframe (a few hours) as a coding challenge. I ended up using Next.js with Prisma (ORM) connected to a SQLite database. Got the job done pretty easily and quickly.

You could just talk directly to the DB using the basic Node SQLite packages/libraries but I found using an ORM like Prisma greatly reduces boilerplate and makes things more robust.