skysight-inc/HackerNews huggingface dataset:
I completely agree. Some of my best parts of film photography was in the darkroom. It was one of the most calming and relaxing environments for me. It's magical to see an image slowly appear in a developer tray on the exposed paper.
Changing an ecosystem is always a risky thing to do though, because there are long food chains, different species living in symbiosis, and just so very many variables.
It would need to be at the point of extraction or importation. Then you'd need tax treaties with countries who are adopting similar policies.
The bar to learning is low, the payout in the industry is high (everyone wants a web site, web service, or web app), and (key in this problem-space) the JavaScript standard library is basically a tiny raisin of functionality.

It's not so much "incentive to improve self is low" as "it doesn't make sense to rewrite something that exists," and since JS developers, to stereotype, tend to be extremely online, they will tend to solve problems by asking "Is this written yet?" instead of writing Yet Another YAML Parser.
My fam has 4 iPhones: An 11 and 3 13's and we could also not tell you the main differences. Better uh... camera? Faster maybe? I know the 13's are chonky.
- Bigger packages in java, developed by big organizations one can trust. Seldom depend on small ad-hoc packages.

- installing a dependency with maven is downloading a jar-file. In npm you often need to run arbitrary code as part of installation, making the attack surface far greater.

- usually use a specific version of dependencies, so no updates unless explicitly wanted.

- in theory, a securitymanager can also be used to give code from different libraries different permissions. Not seen it used much in practice, though. Only seen it be used for plugin systems.
And non-quantitive evaluations are prone to favoritism and prejudice. AKA people gaming the system.

I doubt there's an easy answer.

Trying to better align the short term objectives with longer term ones could help, but that just makes it harder to game, doesn't eliminate it.
True, but phone cameras are really small. So the "infinity" distance happens much closer to the camera.
I read it as in researched found zero-day vulnerability to Antikythera mechanism.
Is it possible to work locally doing all the fun stuff in a kind of "stage" env and then push via scp or some other ssh based mechanism to the remote?
>I may go without a smartphone completely AND tell my children they cannot have a smartphone.

Now that's a sign of good parenting. Often times parents will lose sight of the fact that their kids are people too. Their brains and personalities aren't really developed enough yet to cope with certain things, so it's easy for adults to dismiss the potential for learning they do have. Children are like sponges that absorb any information you put in front of them. If you don't parent them, the internet will.

I strongly recommend sitting them down and calmly telling them all of the reasons, in detail, why they shouldn't want an electronic tracking device and why you're making this decision for them. Children are pretty smart and they'll probably understand most of it.
OK, let's all take a deep breath here - we might just have a different understanding of the word "road". My definition of "road" is not restricted to interstates and highways, but it includes any larger road, err, street. Of course, nobody wants pedestrians or cyclists on highways. It looks like we agree there.

But I refuse the popular notion that roads (as in larger streets, or any street between villages/towns/cities) should be for cars only. The usual examples of Copenhagen, Amsterdam or recently Paris show that shared roads lead to a higher quality of living. I personally appreciate this, and I'd prefer a world where this sharing would be more common.
Check this out:

https://ai.facebook.com/blog/advancing-ai-theory-with-a-firs...

HN discussion:

https://news.ycombinator.com/item?id=27559017

My own review comment:

https://news.ycombinator.com/item?id=27564506

Edit: Corrected the third link. Thanks mdp2021 for notifying me of the copy-paste error.
you need to pay out the earnings of the tax to the population again. This way the population easily can substitute consumption with usually more expensive alternatives

https://en.wikipedia.org/wiki/Carbon_fee_and_dividend
I've been using it for years and it's simple to configure and fast.
> However, which of these African interventions has improved the access of USA interests to natural resources? I can't identify any?

It didn’t happen because China beat us to it with their One Belt Road. Despite bad strategy and poor foresight, it doesn’t weaken my argument that US intervention is mainly about getting access to natural resources.

In certain cases like Libya, it was to protect US strategic interests like maintaining USD as the global reserve currency. It was rumored that Libya was willing to deal with euros instead of dollars for oil.

Nothing you wrote backs up the nonsensical conspiracy theory that the US intervention is primarily for sowing chaos and disorder, or selling weapons. We can’t even compete price wise with modern manufacturers of weapons like the AK47 in Eastern Europe or Asia. Of the few countries in Africa that the US sell arms to, they tend to be more stable than other countries in the continent.
The author describes several parties in the context of the Bitcoin 2022 conference (their self-description: "Bitcoin 2022 will change the world. [...] In 2022, we'll bring together over 35,000 Bitcoiners from around the world, as we work to accelerate hyperbitcoinization.")

While there is some poetic licence in the headline (metonymy yada yada), I don't think that per se is "weird and suggestive".
Doesn't SES address that? The only fundamental barrier right now seems to be performance, which could be addressed by runtime support.

https://github.com/tc39/proposal-ses

https://github.com/endojs/endo
No, I have a systemd timer running once a month where I set certbot to renew my certs and restart services.
Presumably the parent has something more drastic in mind, like leveling every city and replanning it around bikes and extending public transit to every rural community. Basically treat every place like a dense urban area or force people to move into dense urban areas. At least those are the common, facile alternatives presented by the anti-car side of these debates. It's just urban chauvinism.
> Maybe bundling will once again decide which corporations thrive, and which are lost.

Bundling is definitely a thing, here in Canada[0][1], and I expect that it will be a determining factor in services succeeding.

0: Telus and Prime https://www.telus.com/en/deals-and-bundles/optik-internet-am...

1: Bell and Crave https://www.bell.ca/Bell_Internet/Promotions/
I did too!
And this isn't an emergency ?

When I posted my first comment, numbers in the link, I expected at least some of the answers to be in the vein of "lol no, we've been caught with our pants down, see this [source], we would have horrible shortages of X Y months before even the next winter", or maybe "ok, looks like we'll make it up to Z date[source], but that's quite the risk to take !"

But nope, it's mostly been what looks like posturing about how I'm in denial of how the economy needs energy to run or something, even though I've explicitly based my first post on those considerations ! Really disappointed about HN here... (Jancovici, anyone ?)
I'm surprised we haven't had many crypto key thefts via npm supply chain exploits.
I'm still trying to figure out how is it possible to be wary about USA propaganda yet also, even now, still buy Russian propaganda hook line and sinker !

Even though we rarely had a war where the side that is in the wrong was so clear cut ! And it's not like this war hasn't been ongoing for the last 8 years ! (And we still don't have any concrete proof that, say, the CIA was (directly) behind the Maidan massacre - in an age of WikiLeaks/Snowden (!!) - I mean, if Macron had ordered to open fire on the Gilet Jaunes manifestations killing a hundred, I would hope that a coup would have shortly followed, regardless of whether a significant fraction of the protesters were CIA agents !)

I guess it's some combination of "the enemy of my enemy of my friend", and the sheer lack of interest in most (?) EU media (but especially the French one?) in the ex-URSS, resulting in a lack of competent specialists, resulting in an astounding lack of understanding of the situation, after which Russian propaganda was quick to fill the resulting void (especially noticeable in the "alternative" medias like Agoravox since 2014).
A giant fraction of people are disabled. Should they spend outsized resources to be able to sweep their floors?
Part of the problem there is JS doesn't have much of a standard library so everybody and their dog tries to fill that hole.
I wonder if some combination solar and mechanical storage, e.g. pumped storage hydropower could be engineered to outperform nuclear. PSH is pretty inefficient, but solar is getting cheaper and cheaper…
> he would have had to additionally prove in court that he attempted to retreat in order for his shooting to be considered self-defense

I mean, he would have been able to, since we have video of the time period leading up to the shooting, where he's running away from Rosenbaum before he turns around right before the shooting, and the prosecution witness testified Rosenbaum appeared to be trying to take the rifle.
If it's a serious, non casual/on-the-spot usage work on a local copy and sync it, it does not matter if it's a repo or something you rsync/unison that's the top performant, comfortable and safe way. Networked computing does not means do anything via network and desktops are not despite all tentative in this direction "endpoint" or modern dumb terminal of a remote mainframe-alike server.

If it's casual edit you need to do ssh is enough, via TRAMP (who can work on various protocols transparently, not just ssh) if you are in Emacs or perhaps with sshfs for an editor-neutral solution (knowing it does not offer a full POSIX fs).

For testing again ssh is a very common and friendly option.
Fair enough, there is a valid more optimistic interpretation than mine. Still, this is not even the case you’re suggesting. Atlassian isn’t abandoning any features or customers here, this case isn’t indicative of anything other than a run of the mill outage that’s taking longer than a day to fix.
Small is relative -- and to Google, Facebook and Microsoft they're positively tiny. Perfect is the enemy of good or some such and I think this is a move in the right direction even if I can't personally train this on my 3090.
What a piece.

> “red-pilling,” which refers to being indoctrinated into misogynistic, incel-adjacent beliefs

A line written by a "senior reporter" doing an opinion piece, chiefly serving to mock the men and paint the picture that any women involved are either incapable or disinterested. Culturally illiterate.

I can't even guess what contribution was intended here.
Our law and freedom ends where the border begins.
I don't like to copy-paste my comments, but here is right place.

I live in Kiev, Ukraine, and just 46 days ago I thought nearly same about possible Russian invasion to Ukraine. Now I few days per week spend on finding products to eat, because we have real war and we have some problems with supply (I will not ask you to talk here about military needs, but they are also exists and they are very significant).

Now I thank to Gods, for my friends decisions, who where not agree with me and evacuated their families, before I change my mind.

And also I'm very enjoyed by decisions of NATO countries in Europe, to enhance their defense, because this is not the end.

- Predator will not calm down, when/if he capture Ukraine or Taiwan - he will continue looking for other capture opportunities - next could be Kazakhstan, or Vietnam, or South Korea, or even Japan.
Just read history of Second World War - it have begin in Africa, and than where millions victims in Europe.
To be fair Pinboard.in was down quite a lot recently and its DNS has expired(1).

There was a big discussion here (2) and on Twitter IIRC that the author had lost his interest in product and no updates were being made. So there are no guarantees even when it's paid.

(1) https://news.ycombinator.com/item?id=29873306

(2) https://news.ycombinator.com/item?id=30628375
Parameters are just floating point numbers, at most they can be seen as degrees of freedom or kind of like the order of a polynomial used in curve fitting.

They're too abstract to assign much meaning to individual parameters, as our understanding of why their values are exactly the way they are is extremely limited.
IMHO the solution to retaining control of an app that wants to sprawl out is to set up the dev and prod environment via ansible/puppet/similar, into an otherwise bare VM or container, with only a forward proxy to reach it.

Doesn't mean your application isn't going to sprawl, but you will at least have a complete list of all its moving parts at all times, and changing them out can at least be done in a controlled way.

Still, it sounds like SSLPing's problem (and yours) was mostly bitrot, and no amount of ansible will cure that.
Pip isn’t suitable for development. Having a global shared package installation doesn’t work if working on separate codebases. It also doesn’t work because you get implicit dev dependencies and then how do you share those when you want to collaborate? Requirements.txt is a laugh for several reasons. Pip-compile and then installing that into a virtualenv is a neat solution that I found. Not sure if there’s anything meaningfully better yet.
As a volunteer at a small non-profit attempting to keep a similar-sounding setup working long enough to replace it, this is the nightmare I am attempting to unwind. The problem when moving to off-the-shelf software for things is everyone wanting their particular favorite features. Said features were all custom-coded by someone without formal development training, of course.
> How this was allowed to happen is beyond me.

America does not have the same interest in industrial manufacturing that China does, simple as that. If we wanted to shift 100% of iPhone production to the US, how long would it take to spin up that kind of capacity? Is it even possible?
How tractable is it to proxy the npm package sources?

Were I to try and solve this as an enterprise project, that's the first thing I'd try: have a team declare the specific subset of packages we have hand-vetted and host them off a corporate package manager. Our software builds from only those packages; if devs need more, they petition to get them vetted. If they need new versions, they petition to get them updated. Our team keeps an eye out for hotfixes and periodically might mandate an upgrade if a vulnerability comes around.
Saudi Aramco is not notable because it is simply a consequence of clerical designation. There is no innovation, or large scale coordination comparable to another company, not even Exxon or Shell.
I was thinking it's much like Google trying to deal with SEO. Most people optimize for high google ranking, not quality content.

Google periodically changes the evaluation, in theory to reward good content and penalize bad, but people still try to game the system, rather than improving content.
This is a big problem in the tech industry, in general. Some weeks back I read a comment that described some behavior as "high intelligence, low wisdom". I believe that fits pretty well here.

People design new frameworks (presumably) because they see an array of problems with existing frameworks. In designing their new framework, they try to address the shortcomings that the existing frameworks have.

What they don't realize is that the problems in existing frameworks were _known tradeoffs_. Now, instead of the One True Perfect Framework, we have yet another framework with its own set of problems.

People think that every problem is solvable simultaneously, but that's simply not true. You can make tradeoffs. And this isn't just true in engineering, it's true in life generally.

Some tradeoffs make sense nearly always. Others only make sense in certain contexts.

An example here is the tradeoff between simplicity and high availability. It doesn't matter what you do -- the simplest high availability configuration for an app will ALWAYS be more complex than the simplest non-HA configuration. You're making a trade here. It's a trade that is absolutely sensible, but it's a trade nonetheless.

The lesson to be learned here is: stop thinking you can solve every problem at once. You can't.
Some websites even track exactly how you move your mouse and can have a pretty good guess of your age and they can track how many times you click something that doesn't do anything (apparently older people tend to zero in on buttons and click on things that aren't clickable more often. I heard this on older episodes of the Level1news on the Level1 Techs youtube channel, which I recommend listening to for tech news that might be up to a week out of date)

It's not just the data you obviously fill in yourself

and that's before considering cookies other than letting you auto login to a specific site you already logged in to before

Also, isn't Whatsapp owned by facebook now?
Don't trust facebook or anything they own
I think you mean Hollywood filmed a book written by one of those marines.
All of our Sourcegraph docs are public, including our architecture overviews and a myriad other docs linked from there.

https://docs.sourcegraph.com/dev/background-information/arch...
Lapce (lapce.dev) remote development is pretty good, I wish Sublime Text has something like that, Lapce also has good integration with WSL. I tried Vscode but it doesn't work on Firefox level codebase.
"allowed to happen"? Do you think the government should tell companies where they can manufacture?

Even without government intervention, a good CEO should know better than to put all of his company's eggs in one basket, whether that's an individual nation, or a single parts supplier.

Apple's massive growth in services would somewhat insulate it from a locked-out-of-China scenario. At least long enough to establish diverse manufacturing elsewhere.

As an Apple shareholder, for years I've been repeatedly disappointed with Mr. Cook's swooning and fawning over China. Not just for political and social reasons, but because he put the company and its future in jeopardy chasing Chinese manufacturing trends for short-term dollars. I want a CEO with long-term vision, who makes the company resilient so it'll keep producing revenue longer than the next three months.
What phone company or computer company would be able to build their product without their Chinese supply chain?

Russia aimed to be sanctions proof by having a largely self-sufficient industry. China aims to be sanctions proof by being critical in all supply chains. The US aims to be sanction proof by controlling the sanctions regime.
Unfortunately, as recent incidents have shown, these many party, otherwise reliable, projects often have dependency chains that have these one person that can have a breakdown projects as dependencies.

Would I ever include left-pad as a direct dependency? No. But as we found out, the person who provided a library that was used by react-dom might.
This seems too reactive. I agree it is better than nothing, but if someone is going to have the wherewithal to put a law in place around this, I think the goal should should be more about preventing violations than punishment. Maybe you should have to re-take the test when your license expires instead of the license being a lifetime certification. That would be every four years in my state. Not sure if it is different state to state.
Yeah; I was going to write that this shutdown notice is a great microcosm for what's wrong with the field.

You focus on containers, but this project had dependencies fail at each level. The author also cites init breaking, the crypto library losing support for old protocols, node breaking compatibility, and I think some frontend junk I haven't heard of also fell out of support.

The project sounds like it could have been a well-scoped command line option to SSL or something, but, because it was built with current best practices, keeping the dependencies up to date and maintaining it would probably take multiple full time engineers / swe's at a FAANG.

On top of that, there's no sustainable business models for good ?aaS tools (small, or large), just for platforms and monopolistic stuff.
I think VMs are going to start coming back in vogue when companies now that are highly dependent on cloud services start to realize the cost swing back to owning bare metal machines at scale is actually cheaper once your general work loads stabilize.

I think Puppet and Ansible still have a future, its just a "down time" for their popularity right now.
I think we have a XY problem[1] here. Could you explain more details please? Writing, editing and testing on a remote machine seems like a bad practise.

[1]: https://xyproblem.info/
Same, and honestly that would make for a good story too - as in SciFi. The builder of the mechanism. purposefully adds an error in order to change the trajectory of human history.
It looked to me that some of the COVID-19-related supply chain disruptions actually resulted from hoarder-type public that went to replenish their own emergency supplies all at the same time.
I felt reminded of the parties in the HBO TV series Silicon Valley.
It's probably applying and combining analogous processes.

I.e Food A is toxic and we don't know how to treat it. Food B is toxic and we know it takes n-1 steps to make safe. Someone comes along and applies n-1 steps to Food A and its still toxic. Someone else comes along and applies n-1 and then an nth step and there's progress.

But yeah, the article does not come near to examining the way cultures discover things nor in general nor in the case of the cassava.
Since arrays can contain a mix of anything, I don't think it's that bonkers that the default impl chose to canonicalize values into consistent comparables with String(). It's just not useful for numbers.

But for example, they probably decided that it was more useful defaulting to having a sort order for things that otherwise aren't comparable:

a = [undefined, null, undefined, null]
a.sort()
// [ null, null, undefined, undefined ]

Since null < undefined and undefined < null are both false, then a simple `a < b` comparator wouldn't sort them at all. Same for objects.

If you have an array that's a huge mix of random values, from null to undefined to [] to {} and you sort() it, all of those values will now be grouped together by type.

This doesn't seem like a bonkers trade-off.
Creating one's own "reality" to foster a particular goal is nothing new. Does that negate other "realities", of course not.

Arguably in recent years narratives have become the dominant form of management communication to the extent that factual bases are a not really required sometimes. Such kind of philosophical claptrap should be avoided and given a wide berth, I think, because it seeks to replace "reality" with something closer to "religion".
Bring your whole self to work, but make sure you also bring a smartphone!
> long-term benefits of EVs

If a benefit of EVs is currently theoretical and would only come after the useful life of the car, is it really a benefit?

I say this as a happy EV-owner, but one who doubts that my EV will still be on the road by the time when my electricity is >75% sourced from renewable or nuclear energy.
Yes, using a Prometheus exporter.
Didn't someone post 'What to do when the trisector comes' [1] here recently? Great read.

[1] https://web.mst.edu/~lmhall/whattodowhentrisectorcomes.pdf
Like the Oberon OS and programming language?