skysight-inc/HackerNews huggingface dataset:
Thank you very much for taking your time to review the article.

Some of the things you listed as things I didn't touch on the article is true. I didn't cover those.

But this article is for beginners and I also indicate that there's an advanced content coming up on it.

For example, when I mentioned Volumes in Chapter 4, I added this "We haven’t discussed Docker Volumes in this guide but you can visit the Docker Content Hub for more advanced topics like Volumes."

To let readers know that there's an advanced topic that covers other concepts.

I even indicated it at the beginning of chapter 4 "Let me know in the comments section. I will share it with you."

Talking about common pitfalls for exposing ports. I didn't go in depth into PORTS because that knowledge will be too overwhelming at that point. At least, you should know how to dockerize an application before trying to secure it.

I have an Advanced Docker content coming up that covers Docker Security, that's where your feedback will be very help which I appreciate by the way.

Lastly, I never encourage storing secrets openly and committing it to git. That is a bad practice in software engineering.

In development, we all store our secrets in an .env file (if you use JavaScript) that is the standard but when deploying or on production, you move your secret to somewhere safe.

So that's the same concept for the article, while building your dockerized app in development I created the common.env file to hold the secrets in my development. During production, It will be secured according to standards and best practices.

I may not have indicated it like this doesn't mean I'm encourage the wrong thing. Beside for a developer to consider learning and using Docker, the developer must have been developing and deploying apps for a while and should know the best practices with SECRETS.

Next time, I will consider indicating it, Thanks to your feedback.
UTM iOS App - Run virtual machines on non-jailbroken iOS
That link does a lot of talking without really explaining what you DO have to do.
I'll thank this recommendation by recommending The Gramatical Man: Information, Entropy, Language and Life by Jeremy Campbell. More or less same topics.
> It’s nothing. There’s no way to describe it without sounding like a blowhard. It’s not “a controller for some URL space”, because that’s what the class is. An instance of it is utterly meaningless!

IMO, this is being almost willfully obtuse and pointlessly pedantic.

For one thing, the instance, not the class, is the thing most clearly described as the controller in this case. It's true that there's no need to have instances for this static logic, but it's also true that some routing behaviors have their own dynamic data (like caches or database connections, etc.) So a point of just always using instances is that you don't need to know or care externally or ahead of time whether or not such data exists (and to provide something better than singletons or worse things to manage it when it does.)

I'm not a big fan of this form, BTW, though it's not on OO grounds. It's a code and logic organization thing. When I've seen this in real life it turns into spaghetti code of little objects connected in a tangle. I think it goes down like this: people start by encapsulating little steps of processing, I guess because they image they are independent. At this point it's OK -- a sequence of objects connected in a chain of references matching the processing steps. Then they realize they aren't independent, but instead of unwinding the chain, they add more objects -- to hold bits of common context -- and connect them here and there. The spaghetti is starting to tangle. (Mistakes are always made at this point -- e.g. there's ends up no coherent way to update this common data as things change.) The thing grows 10x and these kinds of things are repeated ten times and you have a big ball of spaghetti. Oh, and someone introduced a DI framework to solve these, which helps a little, but also introduces its own complications.
In that case, browsers should optimize SVG more.
Do you mean what guarantees does Lisp offer? Not sure what you mean.
Back to Basics: Tiers in Software Architecture
Am I alone in thinking that using regular DNA is a terrible idea for data storage?

I mean, that would make your storage medium a potential biohazard. Although it probably would all be cool until someone put smallpox.bin on a major torrent tracker.

If it’s really that good, we should come up with a variant using slightly different chemistry so that biocontamination is not a factor.
As the maintainer of CoreJS (Denis Pushkarev) said:

Maintainers are the unsung heroes of the software world, pouring their hearts into creating vast amounts of value that often goes unappreciated. These unsung heroes perform critical work that enables all of modern technology to function – this is not an exaggeration. These tireless individuals dedicate themselves to writing new features, fixing bugs, answering user inquiries, improving documentation, and developing innovative new software, yet they receive almost no recognition for their efforts.
Does insurance cover things you knew were bad? Like, can I use my car in a bank robbery and after it being totaled by cop bullets and crashing into a pole get insurance to pay for it?
I appreciate a good manager, but not really middle managers. I moved to DevOps and I report directly to a VP and it is a game-changer compared to when I reported to a middle-manager in Support.

However, the Principal (senior) Engineer I work with can be a bit of an angry ass sometimes and I am unsure he would make a good manager.
Entirely possible, but that's quite different from them being more vulnerable to diphtheria, which was the specific claim made earlier in this thread.
So, is the AI Scrapocalypse no longer a critically important issue?
> So it's ok if I come to your house and take your stuff because I'm bigger than you?

No, stealing is immoral.

> Because that's what meritocracy does - it gives more resources to people who fit an arbitary definition of merit.

The system itself doesn’t give anyone anything, the market is free to determine that. A doctor who helps more patients (your arbitrary definition) will face higher demand than one who doesn’t help many patients, since people are free to place the value they see fit on their personal health.
SMTP was designed to work without DNS, you are not forced to pay the DNS mafia. To send and receive emails.

If you pay the DNS mafia, dkim and dmarc are overkill/excessive and SPF is more than enough.

And with an IP only SMTP server, SPF is builtin: the reply-to address must include the same IP than the one use to send the email. No DNS here and still a very good SPF validation.

So, all that has a nasty smell of big email providers trying to give hell to self-hosted people/orgs, or a mistake of admins of big email providers).

You have to tell those admins, and if actually a blockade is detected, you have to go legal.

Additionally, if those are malicious expect them to shadow hire (a) team(s) of hackers to destroy your public servers.
I am a big proponent of DSL. I like the approach of using the schema as the business model, with the authorization part added on through Prisma. However, how do you keep up with changes to Prisma? Specifically, how long can I expect to use a new feature released by Prisma in ZenStack?
For one thing without SSL the connection can attacked by a man in the middle and something harmful could be injected in that site.

That particular content is innocuous but you’d better believe there is some static web site you could visit that could get you in trouble with some government somewhere.

It’s not so clear what might be sensitive somewhere (maybe your work doesn’t want you wasting time reading stuff like that when it has nothing to do with your job.). If all sites are encrypted, not just the sensitive ones, the job of mass surveillance becomes a lot tougher.

The Snowden revelations were no surprise to me, the NSA was founded to do exactly that. SSL became popular because of mass surveillance being perceived as a threat, it is not just the NSA, other countries like Russia, France, Israel, Iran, etc. would do the same as well as organized crime groups, “hackers” and such.
They spent 1000 credits on an iDevice with basic, inflexible, proprietary software that "looks good" and expect flexible, powerful, portable, free and open source software to look the same too.
Are the Americans Awake?
What I really don't get is why do people even put their data into these types of cloud services which have no proven track record?

What value proposition were they providing that is so great that you were willing to risk your critical data by putting it into their service when they have done nothing to prove that they are worthy of your trust? what kind of thought process leads to this kind of decisions? someone, enlighten me. I really want to understand.
Personally I can't really get into it because there is no web interface. IOW, as far as I can tell if you aren't willing to use the App, you can't interact with it. I like having a full keyboard and a text box large enough I can actually read things. For all that I'm not a Twitter fan, this seems worse to me.
Yeah, building POCs to make people above you look good to their seniors.
I think the second one lacks polish in terms of the styling of the UI components. The mockup was really pretty and its use of color and borders/outlines, while the current version seems to have heavier outlines, leading to an overall clunkier appearance. I'll run this by a couple of my UX friends to see if they can express what I'm talking about in more professional terms so I can provide coherent feedback to the Thunderbird devs.
Show HN: A GPT-powered chat bot for Amazon
Hi everyone! I've been working on a Chrome extension for the last few weeks to assist with answering product questions on Amazon. I initially built a crude, web version of this about five years ago but abandoned it due to how expensive it was to operate. The current version is still a work in progress but I would appreciate any feedback.
Narcissism is even more intolerable on a professional context because there’s a parallel universe of business culture bullshit people can draw upon.
That already exists for some people - not "which people were right" so much as "which of this persons predictions have come to pass" though. My preferred example:

https://old.reddit.com/r/StallmanWasRight/
Firing people who disagree with you reflects in your product.

The quality control of Teslas is terrible. I have heard extremely mixed things from friends that have one and at least 2_returned them within a year.
Like on a web server?
I saw no ads or popups or flashy graphics on my iphone with the safari adguard extension.
So like I said, just theories and computer models.

That’s some pretty flimsy evidence to wreck the middle class financially.
You don’t have to take it to the extreme, as if it was an absolute. In this case it’s avoiding Tesla, which isn’t really that hard.
The fat fucks ordering food from underpaid slaves should either cook themselves or pay as per the law.

C'est tres simple
Doctors do not get paid for being on call or responding to phone calls, unlike attorneys. And after assuming a mountain of debt (med school tuition >70k, intern and residency salary 30-40k) you are privileged to get a job for 90k. And you burned 7-10 of the best years of your life AFTER UNIVERSITY (70k tuition) in school.
Is this really permanent? I'd love to know more about this bearer token.

Because in the other github issue thread it seemed like every time they found a way around Twitter's safeguards, it was shutdown.

It seems like they've literally hard coded a token into the source code. Meaning thousands of nitter-instances, thousands of users, around the world, will use the same token.

And potentially so will the AI companies.

So I just don't see how this can work.
So I happen to agree with NYC in this case. But, being able to legally challenge a law is pretty fundamental to the US. For instance, in the case where this law is unconstitutional, or conflicts with a federal law, this is exactly how one ought to challenge it.
On the trail of the UK’s ancient stones
Predicting the price of houses in Rust thanks to JIRO Neural Networks
> 3M said its participation in the settlement "is not an admission of liability"

These kind of statements always crack me up, like "oh, really, so you just decided to give away X millions/billions of dollars out of the goodness of your hearts?". Would love to see some kind of policy that ends this kind of absurd post-settlement spinning.
FTLOG yes please this. The best thing about Thunderbird IMO was the dense column view combined with ability to sort a folder by sender, which is for some reason impossible in most other clients.

I’ve found it odd not everyone uses it this way. There’s no better way to blast through an inbox that has let 500+ pile up, and can through and organize it.

One feature I’ve always dreamed of was a column for sender domain, which could be used to sort as well.
What about things like CLOS where you have multi-methods and dispatching is done based on the type of all arguments?
Just a reminder that lazy managers are the source of burnout for those who are under them. As a manager I can say, there is no easier job than just forwarding requests from directors directly to developers, not planning, and promising crazy deadlines to avoid conflict with higher management.

If someone is being paid more, this person has to work more, I have seen so many people becoming managers just to actually avoid work, or thinking that tech is too hard and too much to study. So they instead go to a whole different area where most of your previous knowledge won't be required anymore, and they don't think that they are starting from zero, so they just don't study and read 2 blog articles and think that they got how is to work with people.
This is only half true. They are still going to provide a hybrid application that will be usable offline. And there is a huge benefit: there may finally be feature parity for all platforms including Linux.

Microsoft positions Outlook for big corporate customers. They often need extensibility in their clients. Preferably you implement them only once to run on any client (web, Windows, macOS, Linux, mobile, ...)
A lesson for us and senior managements of different companies, considering cloud hosting.
If you are saving money by moving things away from on-premise or using a managed service to reduce employee costs, then you need to factor in these disaster scenarios and have procedures in place.
If the senior management folks at time only thought about cost savings and not business continuity, then the blame of this fiasco should also go on their heads, as they took credit for saving money and now is time to take credit for data loss.
Brazil has its own version of the GDPR called LGPD (Lei Geral de Proteção de Dados Pessoais) and experts versed in it have drawn concerns about Meta's social network not being compliant to the regulation.

There's a screenshot from the list of "linked personal data" from the app and it contains: health and workout related data, financial information, contact information, purchase history, location data, personal contacts, confidential information, among others.

They don't explain any of these and the experts called it out because it violates at least 3 points from the Brazilian GDPR:

- it doesn't state the necessity and goal to collect this amount of personal data

- it doesn't ask the users for their consent on having their data used for marketing purposes or sharing it with other companies

- it doesn't allow you to use the social network unless you consent to having your data collected
> what managers are bringing to the table

What I noticed in my org, are the senior managers are the ones who get to talk to the business people and get to muddle the waters and do a lot of repetitive work.

Sometimes things do not get done until a project manager or senior dev actually talks to the business person and gets the correct requirements out.

I don't know why it is this way at my org, but the IT director does not want to talk to PMs, Devs, or Analysts. He would rather have a top level circle of senior managers who insulate him from the actual work.
RSS does not work?
1. Oops, I’ll keep that in mind next time I post a link.
2. This isn’t my blog, but just something I would like more people to know about.
Blunt/Direct Communicators, Online Communication and How to Overcome Challenges
This blog post explores the challenges faced by blunt or direct communicators, particularly in the context of online communication, and proposes some effective strategies that have proven helpful.
Gino worked for a business school, as did several of her collaborators.

Often for business school profs, their work will be judged less on academic acceptance (peer-reviewed publication, etc) and more on its 'real-world impact'. You are seen as a good academic of marketing if you can market yourself into Ted talks, pop science publications, and ultimately, influence on 'decision-makers' (the sort of politicians and thinktanks who believe that eg healthcare can be solved by painting hospitals orange).

So there are strong incentives to falsify results but they are quite different from those which bear on actual scientists.
This is the most impressive project in Nim I’ve seen yet. Rewriting any major front-end, complete with working authentication and handling idiosyncrasies of the private API is a herculean task. For context, Twitter would have a team of two dozen or more supporting what this does, effectively. Kudos to the author for accomplishing this feat!
It feels like a psyop. Every single post feels manufactured and fake. Celebrities with millions of followers on different platforms posting things like “Excited to try out social media! What’s everyone’s favorite color?”

My first thought was to wonder who was getting paid, who was a bot, etc.

I think everyone will get bored of the sterile nature really quick and it will either die or become Twitter 2.0
For anyone interested, Self-Hosted InfluxDB3.0 IOx builds & containers are available here: https://github.com/metrico/iox-community
There are actually four "outlook" implementations now.

1. Outlook desktop - old MFC / win32 crapfest

2. Windows Mail / Calendar - new WPF crapfest.

3. O365 online outlook / outlook.com - fat web app.

4. "New" Outlook - this is a fat Electron style app based on the web app.

The latter is actually pretty good - been using it for a couple of months. This is apparently going to replace all the other ones on the desktop.
It uses the same usernames from instagram. So yes.
GitLab team member here.

If you plan on a GitLab mirror, including the Git repository and groups/projects, the direct transfer migration can be helpful https://about.gitlab.com/blog/2023/01/18/try-out-new-way-to-...

GitLab Geo can be an alternative for larger, high-availability setup requirements. https://docs.gitlab.com/ee/administration/reference_architec...
That's not how sources work. You can't just google a few and copy/paste.

I can tell you didn't even read your "sources" since the one I randomly picked, the 2nd one, has the conclusion "Bioavailability and the efficiency of transfer of the ingested POPs across trophic levels are not known and the potential damage posed by these to the marine ecosystem has yet to be quantified and modelled."

It basically says the harm is unknown.
What do we thinking retention will be like?
Is the problem here not simply that Python does not have a convenient way to namespace functions except a class declaration? The `module` keyword in e.g., Julia or Rust seems like what's desired to avoid this phenomenon of "a class which is just a bundle of static methods".
> why not go apprentice yourself somewhere

There has been a big push in the last 20 years or so to make sure that everyone makes a "living wage". This, in turn, makes it nearly impossible for people who want to learn a trade while making something (anything) from actually doing so. Their work and time is basically worthless. They can't be paid accordingly, so they just don't...

Unless you want to volunteer, but most organizations don't value volunteer time because it isn't "real work".
Some companies think customers will accidentally cancel if it's too easy
Maybe I'm missing a core piece from this article, but it leaves out quite a bit of agency from the employee. I never understand pieces like this that rail against employers, but also seem to cast the employees in such a helpless light.

If you're stuck in a situation where you're not getting great feedback on what to work on, that seems like a great time to just build things and experiment on your own. Do it within the rails of the corporate environment you're in, or hell do it outside and put that energy into something else. Just because someone doesn't provide a map, doesn't mean you can't escape the labyrinth and get creative.
Your argument is not "this is a thing which should not be taught" but rather "the economic model of teaching this is bad".

And I agree. But I would also say that the economic model for teaching everything is terrible. So, improving that model will make everything better.

Attempting to special-case a field does not improve things.
My point is that you can just make your own website!
imagine downloading a tv show and it turns out its shit
Except there’s a quantifiable difference between 18k and 9k gold.

Differences in interpretations of historical and cultural events are far more nuanced.

We’ll likely end up in a place with many trusted sources of attestation, each with their own bias toward particular notions of the truth.

Like schools and media outlets, there will be many LLMs to choose from that will tell you, confidently and authoritatively, what you want to hear.
I’m pretty confident they will, if only to cooperate with the EUs digital markets act.
Aaaah. So that's why I wasn't finding anything, I thought I was going crazy. That landing page seems to hint that it's currently available ("Upgrade to version 115 and experience the future of Thunderbird!").
I actually like "dumb" service classes with 1 method. Usually that method may require tens of dependencies to function (db connection, authorization logic, etc.), which in turn have their own dependencies recursively, and your choices are: 1) use global variables/functions for dependencies, 2) pass all dependencies as arguments to your function, 3) inject dependencies in the constructor of a service class/functor. Global state is a no-no in multithreaded code and is poorly manageable (side effects and all), while forcing a client of your function to pass all required dependencies manually as arguments is cumbersome and basically leaks implementation details (hard to refactor). So for me, service classes are the best option. It's kind of equivalent to a closure (object fields are basically captured variables), just written using the familiar OOP syntax (OOP syntax != OOP semantics). In the context of web, I tend to prefer stateless architectures (because they are easily scalable and less error-prone), and coupling behavior with state often goes in the way, in my experience. So my favorite architecture is a network of service classes whose dependencies are injected in their constructors and which are basically "smart" functions (not "objects"), they have no state, and they operate on domain objects which have no logic other than basic self-validation during mutation (to uphold invariants). I know it's a heated topic (rich model vs. anemic) but I've seen projects naturally, through evolution, end up being more anemic than rich. Pure OOP, where state and behavior are entangled, feels very cumbersome to me, it's harder to refactor when requirements change every day, and having too much state is pretty error-prone. YMMV.