skysight-inc/HackerNews huggingface dataset:
I've got some vendors. One of them is still in the Stone Age and has difficulty with anything more than http basic auth. The other can handle a more modern OAuth setup.

Each of these vendors needs a list of accounts in an area. Deep in the stack, the list of accounts and managing individuals tied to those accounts is one service. The vendor doesn't need access to the rest of the service, just the list of accounts.

Each vendor also needs to be able to submit orders and issue refunds. That's a different backend service.

One of the vendors has been known to be... shall we say "inconsiderate" in the rate of requests. It is important that the inconsiderate vendor doesn't impact the other one's performance.

We could add in basic auth into those back end services and add in some more roles for each one of the vendors. This would complicate the security libraries on the back end services needing to accept internal OAuth provider, external OAuth provider, and basic auth - and making sure that someone internal isn't using basic auth because they shouldn't be. And trying to handle per account/application rate limiting on those back end services that really don't need to or want to care about the assorted vendors that are out there.

So, we have a pair of BFFs. They're basically the same, though there's a different profile setting in Spring Boot to switch which set of auth is configured - if its the vendor that uses the external OAuth provider then the external OAuth configuration is used. If the profile is for the other vendor, then the basic auth is used.

Each BFF calls the appropriate internal services and aggregates them - so that the internal services don't need to be concerned with the vendors. There's a BFF that has two instances and has access to these endpoints - that's good enough for the internal services. Likewise, each BFF has its own rate limit so that the inconsiderate vendor won't overload the backend or accidentally rate limit the other vendor out of being able to make requests.

The BFF handles the concern of the vendor. Aggregating the internal requests, rate limiting that vendor, providing isolation between the two vendors, and each handling the authentication and authorization for the vendor. By putting those in the BFF, those aspects of making requests to the vendor are kept isolated.

Additionally, the API contract for the vendor can be held constant while internal teams can change the internal API calls without worrying about if that data is leaking out to the vendor accidentally. Services internal can be updated with new endpoints and the BFF can be changed to point to them as long as the external vendor API contract remains the same - without needing to involve the vendor with a migration from a V1 endpoint to a V2 endpoint.
Warning -- fan comment follows:

This is a terrific article. She makes a solid & important point, she gives plenty of examples, and she brings in some related research that you may not have heard about (I hadn't) and which makes you realize that's there's more out there to learn.
My coding philosophy is centered around simple interfaces.
I think of power sockets and plugs.
The simpler the socket/plug design, the easier it is to plug in.
It's easier to connect a European plug which has 2 round pins than it is to connect a UK plug which has 3 rectangular pins at different angles.
You can imagine how difficult it would be to connect a plug with 10 pins; it would be difficult to get the alignment right and you would have to push hard and fiddle quite a bit to get it all the way in.

If you can get a module to do the same thing with a simpler interface, then that's generally a better module; it's typically a sign of good separation of concerns. Complex interfaces are often a sign that the module encourages micromanagement of its internal state; a leaky abstraction.

A module should be trusted to do its job. The only reason a module would provide complex interfaces is to provide flexibility... But modules don't need to provide flexibility because the whole point of a module is that it can be easily replaced with other modules when requirements change.
We have 6 months and 10 years for tax stuff here in Switzerland too. I thought it was quite reasonable. At least there is a set date when you can and have to delete stuff.

You are also not allowed to use a customer database for advertising if the customer is no longer one for more than 6 months.
Any point on the Bloch sphere can be protected... any discrete point, or set of points... but QFT and the rotations it depends upon are analog operations, not discrete.
https://observablehq.com/ is another option, similar to jupyter but perhaps more approachable for people who like JavaScript over Python.

I'm still looking for the perfect text-based solution.
That would be rather easy for most people, but especially those who don't like lobster. Or shrimp. Or crab. Or fish. Or literally any kind of aquatic food whatsoever, whether salt or freshwater.
> Hillary Clinton dismissed President Trump as an “illegitimate president” and suggested that “he knows” that he stole the 2016 presidential election in a CBS News interview to be aired Sunday.

https://www.washingtonpost.com/politics/hillary-clinton-trum...

> No, there was a widespread understanding that this election [in 2016] was not on the level.

https://www.theatlantic.com/politics/archive/2020/10/hillary...

Status on Clinton election challenges

https://www.politico.com/story/2016/11/voter-intimidation-de...

Her literally saying the election was stolen [from her] -- https://rumble.com/v1fnkh1-despicable-democrats-hillary-clin...

There's a lot more.
So many smart people there and such an idiotic solution - this whole short sighted, mind narrowing, engagement "boosting" recommendation system must be trained on attention horizon of a fruit fly.
You still have to aggregate somewhere. You can do it on the client or the frontend backend, it still has to get done. In the case of the latter we’re adding one extra hop before the client gets their data.

This pattern is advocating for reduced technical performance to accommodate organizational complexity, which I think the parent finds odd. You either have the client call 20 service/data?client_type=ios or you have the frontend backend call 20 different service/data?client_type=ios (after the client called)
Yelling, threats, backstabbing, attrition, substance abuse.
My point wasn’t that it’s good wording, just that it may be good enough to understand what someone meant to convey. I can be very literal myself, and I can take others’ words overly literally as well. It hasn’t made life better for me to insist on that kind of consistency from others, especially when they know I know what they meant to say. It has helped me to develop some instinct for accepting the intent of people’s communication rather than the minutiae of it. Even when I find the inconsistencies. It’s much nicer to realize what someone meant, and sometimes even to have a small laugh to myself about the way they put it.
CS 251: Cryptocurrencies and Blockchain Technologies
This seems irrational. The need for many commodities like TP or water is fairly homogeneous and predictable, and excess is typically just used later or shared rather than abandoned. It's better in that you can maximize the number of people who have a sufficient supply to get through the emergency.

Again, I'm still wondering why you cite government as the opponents of free market pricing, when the objections often originate with people who are mad about the idea of paying $75 for a bottle of hand sanitizer: https://www.today.com/news/brothers-who-hoarded-17-700-bottl...
With an SOIC chip, I don't worry about "order": I just hold tweezers on the chip, blow some hot air, and it comes off in about 1 second. What you're describing is orders of magnitude more difficult and time-consuming.
At my last company, when we were building a greenfield application, we leveraged this pattern, at a time when GraphQL was not yet available. In my new company, I look at GraphQL and realize that this solves the BFF pattern in a standardized way
Nope.

Mid thirties and being a generalist means that not only am I employable, my breadth of experience allows me to bring together things from places others would be unaware of.

I occasionally wish i was more of a specialist, but usually chalk it up to the sort of all pervading impostor syndrome that goes on in software development circles.

If someone wants to put me in a position based on my current skills where I end up becoming an expert and they pay for that time, then it will happen. Otherwise I'll just keep learning enough to be useful in dozens of smaller ways. From the browser's JS engine event handling at the bottom of Flux/Redux to how Kubernetes works and how to do useful stuff with it, to 3D printer firmware and how my drill press works.
"The intro to cryptocurrencies and blockchain course at Stanford now has more students enrolled than the intro computer science course"

https://twitter.com/sofianeflarbi/status/1571734544969076737...
Embeddable plugin systems are absolutely a goal! See this part of the blog post: https://bytecodealliance.org/articles/wasmtime-1-0-fast-safe...
It's worth asking, sometimes people miss the obvious
Same, but deep down I know that the chronological subscriptions page will be taken away soon, and that’s when I’ll stop using youtube except for direct links to videos.
Why do you have no doubts about your employability? When I was in my early twenties I felt pretty much the same way, but then the rest of my twenties proved different
The first pulse that creates the electron channel sounds similar to the army's lightning gun:

> The Laser-Induced Plasma Channel (LIPC) is designed to hit targets that conduct electricity better than the air or ground that surrounds them.

https://www.bbc.com/news/technology-18630622
The former Prime Minister of Australia had the Governor General (a largely ceremonial role) secretly swear him in to multiple ministries without the knowledge of the incumbent minister, the parliament or the public. The Governor General didn’t publicise these appointments. The PM then used his new ministerial powers a couple of times.

The convention expected was the GG would announce these appointments, he didn’t and put out a statement when it was found out that literally said “oh yeah not my job sorry you thought it was”

https://www.gg.gov.au/about-governor-general/media/statement...
Apple shouldn't be the one doing the signing for every user or giving out any private keys of theirs. What should happen is that they should be forced to design their devices in such a way as to allow an authorized user to change the public key used for signature verification.

All this is a disgression however. The point is that the law should simply mandate that manufacturers design their devices in a way in which what the OEM can do to an already-sold device in terms of code execution/control also be possible for the new owner to do.
It's a bit much to call it a "hack". ASML & collaborators have created an EUV source that works at the scale needed to mass manufacture chips. It's not something held together with duct tape. Yeah maybe a little accelerator is theoretically elegant, but some among the thousands of engineers and scientists that have worked on their EUV probably considered that.
Outright killing adblocking will reduce Chrome's market share significantly. Enough that Chrome may lose its position as the top browser. Its a terrible business decision that can kill Chrome or atleast give a chance for someone else to take their position. Why would they do that?

Crippling enough that most people won't notice is a viable business decision. Introducing a security benefit, inserting a self interest(crippling adblocks while providing vastly inferior alternative) which won't be noticed by most people but they are being secretly compromised behind the scenes since less ads are blocked and are being tracked more effectively is a profitable business tactic. Bringing a benefit along with a profit tactic compromising customers and pretending the said compromise is as big of a detriment to the consumer, which it is not, is whats going on. Is this so hard to see? Its not a FUD but the profiting parties trying to sway the opinions.
A human being should be able to change a diaper, plan an invasion, butcher a hog, conn a ship, design a building, write a sonnet, balance accounts, build a wall, set a bone, comfort the dying, take orders, give orders, cooperate, act alone, solve equations, analyse a new problem, pitch manure, program a computer, cook a tasty meal, fight efficiently, die gallantly. Specialization is for insects.
Also discussed here earlier today from the original source:

https://news.ycombinator.com/item?id=32917038
I think the title would benefit from mentioning that this is for cosmopolitan libc. I was expecting this to be about syscall portability in general.
I've been playing Dirt 4 with a controller, but god damn is it boring. Do you actually find Dirt Rally 2 fun?
The Tetris Proof (2017)
I loved her since I first heard the Sugarcubes way back when. They stayed in the hotel I was working in (HoJos in Kenmore square!) so I bought their CD. Been a fan ever since.
Become a DevSecOps engineer. Your skills set are in demand because you understand all three important areas
You don't even need TOR. Try a public wifi that is not in the "preferred geographical location" (i.e. US or Europe). The gaming cafes in SEA are probably responsible for 90% of all AI training datasets lol
Ask HN: How to become a good DevSecOps engineer?
I heard many companies are hiring for these generalists
Can you share who implemented it?
What a Chad dad :)
I guess I don't really understand what the gameplay component actually is maybe. What mechanics appeal to you?
Lol.. sure, and you must run your computer on a unikernel then I take it?
Almost 10 hours per day. I'm curious : Is it typical for gamers to spend this much time gaming?
Isn't that what Docker, firejail, nsjail, flatpak and others already achieve...?
+1 for CLOG
No. The demands for specialized roles shift from epoch to epoch, but being smart on negotiation, strategy, sales, marketing, and communication will never go away.
There was article here the other day on a project by herb stutter to improve c++ syntax, I can link it to you if you want.

But I get the impression that the syntax is a fixable problem. Usually critics point so something like the template system or something.
I think my sentiment is echoed in some sibling comments as well, but I have been having a good time with vanilla JS lately.

React and friends really do make certain things easier and "nicer". But when you sit down and think about it, those things aren't that bad with vanilla JS. It really makes me wonder what value React et al is adding for the cost in KB and mental overhead.
A few years ago there was a company building test cars with aluminum air batteries. Aluminum air batteries have something like 4x as much energy for a given volume as lithium ion, and they were getting over 1000 miles of range.

The downside of aluminum air batteries is that they are not rechargeable, so the idea would be to design the cars so that the batteries can quickly be swapped. The discharged battery can be recycled.

It was an interesting idea.
Classes in JS are just functions anyway, and functions can have state. Saving the state of a function is a different thing, but of course JS allows that, too. Why is it weird?
On the flip side, that’s a 50-year old quote and maybe times have changed?
I ran into a problem formatting numbers in the Italian locale back in 2014:
https://bugs.launchpad.net/ubuntu/+source/langpack-locales/+...

It turned out to be a low-level bug in glibc:
https://sourceware.org/bugzilla/show_bug.cgi?id=10797

It got fixed five years later, long after I had worked around it and left the job where I found the bug.
from the top of my head...

* Sales Force - Lightning

* Atlassian - AtlasKit

* Microsoft - Fluent UI

* Uber - BaseWeb

* SAP - UI5 Web Components for React

* Palanti - Blueprint

* AWS - Cloudscape
I agree with your assessment here, but one additional benefit is the capability to iterate faster on the backend. You have control over _where_ the aggregated data is coming from without waiting months for users to update their mobile app so that it sends requests to a new service, for example.
Sad that you have no spare effort-capacity whatsoever to make a choice for yourself like this, that you see yourself as at zero! Woe unto you.

I dont get why this proclaimed unwillingness & lack of deciding leads you to pick the worse less defensive pick though. Why actively choose worse defense? I dont get your argumentation. Why is the worse dumber pick better for you, even if you dont feel convinced of the harm? Presented with a defensive & apathetic option, I don't see why you would still choose worse.
Carbon Mapper front end engineer
Come build the front end for a new set of satellites set to track methane and carbon dioxide emissions at individual facilities globally.
It's simple, really. Cloudflare is the single root cause of the issue. All the others are not a huge issue until Cloudflare notices. It's perfectly rational and reasonable to blame the company trying to gatekeep the whole internet, without taking any responsibility for false positives.

Scaling to infinity isn't a right, it is a privilege. Any company that builds this sort of no-human-decision systems are abusing that privilege and hoping that anyone who suffers wrongly under their systems doesn't have enough voice (google seems to be the worst for this, though cloudflare seems set to follow).
Optimizing TF, XLA and Jax for LLM Training on Nvidia GPUs
Very disappointed this wasn't actually a video of some extremely interesting mechanical engineering and physical coordination of a team of people at some sort fo no-rules Le Mans type endurance competition performing the feat described in the title.

Turns out it's a podcast episode type discussion (just audio with a logo) of the normal software analogy, also often described as "replacing a plane engine in mid air" or "rebuilding a plane while it's still flying" and I'm sure countless other variations.
They addressed the "political rabbit hole", but the powerful nature of algoriths to change people's lives remains completely unaddressed. People's tastes, views, behaviors, career paths, music tastes, and personalities are being influenced on a mass scale by totally black-box algorithms that are manually tweaked by unaccountable employees. People's psychological vulnerabilities are taken advantage of, as you can clearly see with the big rise in people faking Tourette's syndrome because of TikTok, that psychologists are now having to account for in their diagnosis and screening.

"A modern clinician needs to remain abreast of social media sources as knowledge of media content is essential in managing patients in the current environment."

https://movementdisorders.onlinelibrary.wiley.com/doi/abs/10...

We've all met people that adopted wholesale the mannerists of this-or-that online influencer; gestures, tonality, jokes and all. It's creepy as hell to see, and sure, and algorithms are reinforcing this phenomenon. An "obsessed fan" is YouTube's ideal viewer, since his engagement will be through the roof.

Spotify is unprofitable, so they allow the biggest artists to pay to be promoted by their algorithms, which shapes the world's music tastes.

Fat people are being recommended mukbang videos.

These algorithms can be studied, as TFA does, and you can try to hold these companies accountable, but there's limited utility in doing scientific studies of algorithms that get updated multiple times a day.

In today's world, manmade algorithms from a handful of huge tech companies are likely exerting more influence over human evolution than nature itself is!
NOVA here, DMed!
Not at all! Every time I think I might’ve doubted it I’m blessed to be able to continue generalizing out of whatever specialized corner my career seems to head towards, and to continue to be effective doing meaningful work.
> most communities are non-technical and probably won't be able to set up their own crawler

They can use a solution which already integrates the search. Forums and CMSes are a good target for that. Then you can say "I'd like my search to look at widgetlovers.com too" - and you get their sitemap + featured external links, because they run FooPress that supports it.

Kind of the same as sitemap we already produce for Google.
Anything can be made to seem something other than what it is from some angle or another - or some quote or another. The best of intentions can be turned into the worst, and the worst into the best. The question is one of intent. So I'll ask you. This [1] is the CSPAN coverage, which as close as one to get as definitive. And it is effectively identical to all other coverage as well.

Do you genuinely believe the long zoomed out and angled images that are required to make this scene look less creepy are what the scene was intended to be streamed as? Or it was it intended to be streamed like literally every other single 'serious speech', the sort of which Biden's team, a group absolutely obsessed with visuals and apperance, have decades of experience orchestrating - front and center, zoomed on speaker?

[1] - https://www.youtube.com/watch?v=JemWkV2Vcic
Are you doing this behind a VPN?
The watery secret of ancient North America
> The CIA has the operators, equipment, and info to be able to kill almost any US citizen in a couple of hours for arbitrary reasons. How many times have they done it?

How would we know?
I love the socket/plug analogy.

It's even better than it looks in Europe: there are actuality 3 contact points but only 2 are salient which allows for 2 easily pluggable positions (rotate 180deg). The ground is positioned twice for that matter.

Only France has a variation around that to my knowledge, that is still compatible across Europe.

And no one notices and just plugs in and out without thinking twice about it.

There are some unsung heroes here.
Most western companies reduce the number of features to ship, or extend the deadline. They to some degree manage scope, risk and stakeholder expectations.

Only a seriously shit operation requires developers to “work weekends” or evenings in response to project incompetence. I would seriously recommend you look for employment elsewhere.
I would want to land on it. But I might not be the best yardstick for that because I mostly develop solo and don't have a lot of technical peers/colleagues that might say 'oh, use MongoDB for [task] because [reasons].'

So I look at pretty much everything in terms of either 'does it solve/help with problem X I already know' or 'what is this for and why does it matter'. Sometimes it's interesting and maybe I'll use it someday, other times it's not necessarily interesting but I pay attention because I'll definitely need something like that sooner or later.
Right so, again, what exactly is the purpose of graphql?

It seems to be a replacement for an ORM that then needs an ORM. So it’s a replacement for passing JSON objects around except it’s just doing that with a dash of esotericism.

What can graphql do that an ORM can’t?
I do something similar. You can configure this using Chromium policies and don't need an extension. I wonder if Firefox policies does the same thing as well.
You might also be able to leverage typeof in conjunction with Id<T>. Like if you have some parameter x with a complex type you can create a temporary variable of type Id<typeof x> to avoid looking up any additional types. Totally agree it should be supported out of the box, however.
Giving Big Corporations “Closed Generic” Top-Level Domain Names – A Bad Idea
Typical flywheel energy storage relies on enormous mass rather than high rotational speed. I don't think that flywheel storage is necessarily hazardous.
He's claiming they enable clients to navigate the many 3PLs. He claims to offer you the client company, the software, that will let you ship your stuff through any 3PL. He's a broker.