skysight-inc/HackerNews huggingface dataset:
Keep relying on CRA post MVP?
I'm having an argument with a colleague over whether we should eject from CRA or not. The issue started, because our PO and I discussed the fact that there are 40 known security vulnerabilities flagged in our dependency tree.

Fixing those in part requires upgrading from CRA 4 to 5 and hence from Webpack 4 to 5. Unfortunately, Webpack 5 disables polyfills per default and CRA does not allow you to configure that.

So far 5 options seem apparent to me:

1) Keep 20 known security vulnerabilites

2) Get rid of all dependencies requiring polyfills

3) Add react-app-rewired on top of CRA to configure polyfills

4) Stop using CRA and configure Webpack

5) Stop using CRA and configure Vite/Rollup

Now, my colleague says we should stick with CRA, because Facebook/React knows better than we do and it will be a pain in the long haul.

My take is that CRA did it's job well up to this point as a jumpstarter build-tool, but that the time has come to configure it ourselves.

Can I ask you lot for some expertly advice?
Fair point - I think I was being over-sensitive there :-)
India Orders VPN Companies to Collect and Hand over User Data
Ukrainian media reports 150,000 people are now using the internet via Starlink in Ukraine. There are no specifics about locations, but the impression is that these 150,000 people are citizens (as opposed to military/government).
The second game is really good. I think it's a lot funnier than the first and has more colourful areas and dialogue (although some puzzles are ridiculous).
> And set up a webserver. Perhaps compile mod_php for Apache and configure it, taking care to do it securely.

You don't need to do any of this if you use a hosted service, which most people did. In that case you just needed to setup an FTP client. Of course these days hosted services for other stacks like Heroku are about as simple. Just push to a git repository and you're done.
How would you replace Russian oil with coal? Are there any oil based power plants? Those tend to be peaker plants due to the extremely high cost associated with them.
> SSR is great, don't get me wrong, but the reasoning that encourages devs to use it is misplaced (not WRONG, misplaced).

The reason we do SSR is because we want developers to use the same language, libraries and frameworks in the frontend and in the backend. I just don't know which kind of developers are those who cannot bother to learn something else besides JS/TS. I have heard many times the argument "we are saving developer time by using the same technologies everywhere!", but I just don't buy it.
Yeah, but when everything lives inside the same Lisp environment, there is no need for glue. You have variables and functions, all with built in documentation, that are easily composed.

Vim, on the other hand, appears to conspire against the user's attempts to build reusable configurations. One plugin may require Neovim. Another may require the Python runtime to be configured and installed. Vanishingly few of them have built in keybinds, and those that do are not guaranteed to be harmonious with other plugins. And besides, should I write my config in vimscript or Lua?

It might sound like I'm picking nits, but I don't find it coincidental that the best configurations that people have managed to build have been upon the strong bones that Emacs provides. Doom Emacs (https://github.com/doomemacs/doomemacs) is best-in-class, providing harmony between all of the built in modules and their bindings. I uncomment a line in a config file and get full Python support, with refactoring and formatting and such, ootb. This ends up being true for a shockingly long list of languages and tools.

On the Vim side you have https://github.com/NvChad/NvChad which appears to no longer be accepting new plugins and https://github.com/LunarVim/LunarVim which appears to provide a really good programming experience but is limited in scope to a handful of core plugins and whichever LSP servers they can get their hands on.

I used to use Neovim and compose everything together by hand as well. I don't see why I should bother today when Doom Emacs provides the same experience I would have built for myself, out of the box.
Imo the biggest difference is that in the Python / JS world you can be considered a senior developer at many respectable companies and still be clueless about tooling, optimization etc. Most shops (exceptions being places that do a lot of ETL, data processing...) are OK with clunky Python as long as it is not unusable. On the other hand if you are working with C / C++ a more active approach is needed if you don't want your software to blow up.
I'm really not sure who to blame for this, because it also happens when using Cloudflare's Warp app and it might depend on the provider. But on the other hand why would noop.megaphone.fm even exist if Megaphone/Spotify are not involved in this?

Most likely it's censorship and pressure put on these companies, even though Spotify is officially out they might still have something to lose by not complying. Or maybe there's some banal technical explanation like a long TTL so this redirect got cached and still persists for some servers.

EDIT: tested Cisco OpenDNS servers which also resolve to 127.0.0.1, while Quad9's 9.9.9.9 resolve to proper ones.

I think what is going on here is that if server supports geo-based responses, then it resolves to 127.0.0.1, even Cloudflare's 1.1.1.1 does, but depending on the provider it breaks. But if it doesn't support that, then it resolves to actual servers.
I use vim for quick and fast terminal editing: little shell scripts, config files, commit messages. Emacs for anything serious.
Vaxxinity shares spike after insider purchases
I'm not arguing that point.

I've made it myself.

Again: it did not subvert process or go against precedent. Numerous justices have long-overstayed their terms.
The other easy part was the markup. Just take your existing HTML page, add some for loops around bits of it and insert placeholders. 14 year old me found it very easy to turn my static HTML (which I was copying and pasting and changing for each article) into a dynamic page.

Of course it had tons of issues (GET and POST variables turning into globals, SQL injection etc.) but the barrier to entry was very low.
I don't think we should be adding even more overhead to HTTP requests.
Ask HN: Why don't residences in Spain (Europe?) have smoke detectors?
I grew up in the US, lived in Spain for several years and now regularly visit my in-laws.

I'm currently staying in what I would call an average apartment block with ~40 units built in the late 70s or early 80s.

As far as I can tell there are no smoke detectors or sprinklers and there is definitely no alternative egress like a fire escape. And I don't think I've been to any residence in Spain that has either (but I'm not always checking).

Fire deaths per capita are considerably lower in Spain than in the US[0] where my impression is there is a huge emphasis on fire safety equipment like smoke detectors and sprinklers.

I expect that smoke detectors and sprinklers save lives - or certainly hard to argue that they don't at the margin regardless of the type of building they are installed in.

What's going on? Why doesn't my in-law's apartment have smoke detectors and sprinklers? Is my family actually sleeping in a death trap?

Some possible explanations I can think of:
* Different building materials and building codes - On average Spanish residences more fire resistant because of their construction

* Cost - smoke detectors and sprinklers drive up costs and getting adoption might be hard if they only save a small number of marginal lives. Even if I would argue that makes them worth it everywhere

* Business/Politics - Fire safety manufacturers have had more success in the US getting their devices into building codes and legislation

* Rescue/Fire Suppression - this seems very unlikely (figure firefighting and evacuation techniques are pretty universal in the developed world) but I guess Spanish firefighters could be better at getting fires out and people evacuated

I have been wondering about this for more than a decade and this seems like a good international community to find someone who might know or people interested in the topic. I'd love people's thoughts.

[0] - https://www.worldlifeexpectancy.com/cause-of-death/fires/by-country/
Who gets to define the group and who gets to define what is good or bad for the group? Who gets to decide who is in the group and who needs to be cast out? Who gets to speak for the group?

Have a look at the history of politics and pay special notion to those strands which centre around grouping people, whether that be "proletarians versus capitalists", "those_who_belong_to_my_religion versus those_who_do_not", "those of our nation versus those from elsewhere" and now this "those who belong to my identity group versus those who do not".

Also have a look what most of these group-centred ideologies have in common, namely the identification of a specific scapegoat group which is blamed for all the woes - including those caused by the application of the group-centred ideology - which beset the in-group. In Bolshevist Russia is was the Kulaks [1], in Nazi Germany it was the Jews, in theocratic Iran it is "the great Satan" (i.e. the USA and its allies) while in this new "woke" cult it is the "cis-gender heterosexual white man".

The problem with all these group-centred ideologies is that groups do not have a voice, only individuals posing as the group do. Those individuals can gain a lot of power and as such either tend to get corrupted or are drawn to the role of spokesperson because they already are corrupt. Group-centred thinking works well on a small scale - family, small neighbourhood, etc - but it often fails when the members of the group no longer personally can know each other since that makes it possible for the corrupt spokespeople to make their play.

[1] https://www.britannica.com/topic/kulak
Location: Kathmandu Nepal

Remote: Yes

Willing to relocate: Yes

Technologies: Python, Flask, React, Rust(beginner)

Résumé/CV: https://linkedin.com/in/geeksambhu (reach out to me on linkedin or email for resume)

Email: geeksambhu<<at>>gmail.com

Software engineer with 5 years of experience in software development. I have extensively used Python, Flask, Django, node.js. Besides that, I have worked with cloud environments within AWS, primarily with AWS EKS, ECS, ECR and so on. I have experience in developing applications with Kubernetes and using cloud native technologies.
The vast swathes of unused land now won't necessarily be the case in the future.

Incorporating solar into housing, like roof tiles seems like a no brainer. Energy stores like reservoirs, or flywheel tech or something else could help plug gaps.

Then there is the whole question of energy needs. Zero energy housing. And micro generation could help.

In the UK our housing and agriculture sector, uses a huge amount of energy for not a lot of gain. Given a modern country and opportunity learn from others' mistakes.
I’d like to triple-upvote this.
Where is "the right to bomb and invade other countries" in the Constitution?

Are you arguing that in USA unless it is written in the constitution, you can't do anything?

Is "flying on a plane" a Constitutional right?

Are people in US really that stupid that do not even understand their own fundamental law?

The Constitution protects a person's freedom of choice in medical care, including the right to refuse unwanted medical treatment and rights preserving the doctor-patient relationship.
Well, you'd have to separate the different values in the User-Agent somehow, what character would you suggest? They all take the same amount of space (no pun intended).

If you're worried about spaces in user-agents wasting bandwidth, there are a awful lot of windmills you'd have to bark at every day, I do not envy you.
That's a cool idea I'd never considered. And it's easy to set up. But then the main thing you're getting out of the VPS is the static IP. The main reason I was advising against VPS's, besides obvious vulnerabilities, was that their IP blocks get banned all the time. If you want to run a mailserver for a long time you need to cultivate that IP address's reputation for years, and you don't want it to be anywhere sketchy.

If you're paying for that, why not just pay for a static IP at home?
Their goal is to compile GCC, so whatever subset of C GCC uses.
> Replace “software development” with “life”.

Agree.

Outside of the physical benefits of exercise, getting comfortable being uncomfortable is one of the big mental benefits. A more extreme version is something like jiu-jitsu.

I have found that routinely being uncomfortable through exercise leads to being relaxed in other uncertain life situations - software development included.
The real problem is that you cannot set the UA with js now in 2022 and that's like 6 years after they decided you should be able to.

Basically you obviously want to remove the UA string as it's just wasting bandwidth.
I think this type of decision comes down to resources available for development - if you're a one-person (or very small) team, managing one code-base and one deployment stack is way better and more reliable.

On the other hand, native app performance is second to none when done well, and if you have dedicated developers to manage a separate deployment from the web interface then you're going to have a better time going native.
That assumes you have PHP already installed on the server right? I mean if you already have nodejs on the server, you can also just drop files in
Honestly, I have the special edition and after about ten minutes of playing I switched to the original graphics and music and didn't really look back. They really have aged quite well, even though of course they look much blockier on a 24" TFT compared to the original 15"ish CRT experience...
Looks like a really interesting set of libraries (https://github.com/tboox), available under Apache 2 license; also xmake looks interesting; definitely worth a closer look; thanks for sharing.
> It also stems from a kind of silly idea that the things we disagree over boil down to finding logical errors in each others positions, rather than emerging from deep-rooted differences in values

I lived with the same roommate for 3 years in university who was across the isle from me. We had many long conversations and I would say that ~70% of our differences in opinion boiled down to having different values.
Well, could be that, could be other things as well. Could be the sender who have implemented their email sending via a queue, and currently they are overloaded. Could be their email sending server/service who is behind and having delivery problems. Could be numerous things thanks to the nature of email.

In the end, the UX of having to wait for an email sucks, sometimes.
Emacs 28.1 [0], recently released, has support for native compilation [1], which greatly speeds up some workflows.

[0] https://www.gnu.org/savannah-checkouts/gnu/emacs/news/NEWS.2...

[1] https://www.masteringemacs.org/article/speed-up-emacs-libjan...
Found this thread not being able to save any bookmarks through the 'Pinput' chrome extension or directly through the site with no errors/warnings at all...

Just exported all the data and for me, time to look for alternatives. I really don't like the flippant nature of the dev.
At least overhead lines are honest. I find the buried infrastructure harder to level in my brain.
so everything's fine?

don't act surprised if people then can't tell the difference with China or Putin's Russia.

You know, if I were a woman I would remind you that In 1920, the Russian Soviet Republic under Lenin became the first country in the world in the modern era to allow abortion in all circumstances
"When you have fans like this, who needs haters?"
> running JavaScript universally or as some like to say, isomorphically, that is, both on the server and on the client

"Universally"? "Isomorphically"? These people sure as hell are trying way too hard to avoid using the word "portable" for some reason.
That is a lot of money and surely few can afford it for their email. What are the advantages of it that make it worth the time and effort. Is it security? privacy? or just trying to keep things a bit more decentralised?
Which is great if you don't mind living a few 100m from a live nuclear plant, and you have a massive backup heat supply when the plant is closed for maintenance...
Wow, I've been on the lookout for larger jq programs from which to learn. I'm going to enjoy learning from wsjq, thank you!
> It is almost universally ignored now

I wish. Once in a while I come up to sites that present content based on UA (e.g switching UAs produces a different layout). In all cases things work, but the UA pile of lies can make it a subpar experience on this or that device with this or that browser.
But saying “I don’t want to be wildly unkind” implies that there is something about the author and their claim that is deserving of meanness. I think that is an unkind thing to say.
Not all plastics are made from fossil fuels, and photochemsyn was suggesting: “making plastics from biomass carbon sources or from direct air capture”
Or you can use Lightworks used to edit Wolf of Wall Street among other Academy features.

Also be aware that Resolve does not support integrated graphics (but only on Linux, bizarrely).
Why do WiFi speeds vary so much? – Computerphile [video] start .34s
Correct, thanks, I will try to be more succinct and clear about my comments in the future.

We are losing afaict unique scientific capabilities with this shutdown, the least we can do is document it well so the next multi billion dollar project to regain said capabilities has clearer acceptance criteria.
I agree. Amazingly cheap. Worth a little bit more technical hassle (looking at templating and batching for example IIRC you had to do for marketing or bulk transactional emails) but still amazing value for money.
Its actually around 70-80% efficient depending on method.

https://en.wikipedia.org/wiki/Electrolysis_of_water#Efficien...

Not that this changes the picture of hydrogen powered personal vehicles.
Still the only viable option for grid level seasonal storage.
I'm afraid the History Channel is not a replacement for a curriculum in anthropology. ;)

https://www.nature.com/articles/srep32472
I Don’t Have a Business Plan: How Elon Musk Wings It
> I can understand the intention behind the design, but I feel that, in order to make a common usecase less surprising, they made the whole thing actually more surprising.

I don't agree with that, `for let` simply behaves as if the `let` was inside the loop:

for (var _i=0; _i<3; _i++) {
let i = _i;
setInterval(() => {console.log(i); i+=100}, 1000);
}

there you go, same behaviour as a for-let.
Here's an example from the original survey of India. https://apps.lib.umich.edu/online-exhibits/exhibits/show/ind...

In the US, if you hike, you'll often find circular USGS survey markers inset into mountain and hill tops.
Arm wrests back control of its rogue China subsidiary
Nobody knows how toxic they are
> banning straws is just plain stupid

I believe the OP meant plastic straws. I live in Poland and haven't seen plastic straw in a while - all replaced by paper and other natural material straws. I don't feel it's stupid, but I might be missing something.

It's also a surprise to me that US uses recycle bins to just ship the contents overseas. How stupid that is? Why not actually recycle it?
You should really play them both; I have the remastered versions on steam and enjoy playing the hell out of them. I often switch backward and forward from new to original graphics and music for nostalgia reasons though.
It's a continuation of Firefox work. Servo would mean starting from scratch.
If you have a monorepo, it is pretty convenient to have synchronized Typescript definitions for communication between frontend/backend because they reference the same file. If you use different languages, then you'll need a translation layer/tool for shared interfaces and that can occasionally desync over time.
Cellular data was technically widely available for years before iPhones (see e.g. GPRS for the tech, adopted in 2000), albeit very expensive.

Apple changed that.
They negotiated a special contract with AT&T and for a year or so the first iPhone was the only phone in the US with unlimited data plan.
> Among other things, it does not require any new syntax.

Which was added anyway, because Javascript got constructors (and `new`) to match Java,
One gotty(1) Web terminal per user
Exactly this. Gelmann pulls a quote out of context and omits the core of the argument as to _why_ it is extremely plausible. Alexander doesn't just leave that statement hanging, he cites other instances where this exact thing has occurred. Including a first hand account dealing with this in a clinical setting https://slatestarcodex.com/2019/03/11/ketamine-now-by-prescr...

If Gelmann had decided to steelman Alexander here, it would have been a productive conversation! Instead it's a squabble over the definition of "extremely plausible".
Trying to "steelman" a position you don't know the real arguments for is to "strawman" it with good intentions. How about asking people who actually hold the position who the best advocates for it are, and listen to them? This pretending at fairly representing an idea you disagree with is more about signaling, feigning objectivity, and ego stroking than an earnest attempt to grapple with the idea.
What preventing Australia from building an enrichment plant?
RDF 1.1 Primer (2014)
> Error messages like "This expression is of type X but an expression was expected of type X" were not uncommon, and super frustrating.

That particular error message has been gone from OCaml for years now.
> However, if you are too lazy to use your imagination to decide what alignment a character might be, then maybe role-playing isn’t for you

Using your imagination around the roll of a dice is the entire point of using dice in an rpg, if I just wanted to make this stuff up with no rules and no restrictions then I'd be writing a novel
True.
The outbound queuing thing is going away, though. A lot of banks and service companies used to wait until a regular 2, 3 or 5 minute mark (00:00, 00:02) to send those verification emails in batch. In the past year or so there's been a move away from that it seems. The initial reason for batching them was to prevent spammers from triggering hordes of emails somehow off their system by gaming the "submit" button for a form, but now there's other security in place and the emails are being sent out faster. Generally, once an email is sent, it's almost instantaneously received if the recipient isn't delaying or blocking it. 99% of the time when I hear from clients who are waiting for an email, it either came in right away and bounced because our spam filters were too tight, or our own greylisting kicked in and slowed it down.