skysight-inc/HackerNews huggingface dataset:
> I've worked with a lot of third party vendor API's where it was purely server-to-server access, but for some reason wrapped in OAuth... because... architects and compliance something something

As someone who's implemented a bunch of these..

It's less about compliance and more about getting everything "speaking OAuth"

Once you've converted your user-facing flows to use OAuth and you're dealing with scopes, tokens, etc, converting the backend to also use it makes a lot of sense. Then you have ONE path for token validation, inspecting/validating scopes, and client id/secret issuance whether you're on the front or back end. Having one model for people to understand makes things tangibly simpler and shrinks the libraries/tools you need.

If you ONLY have backend (service to service) flows with a simple authZ model, OAuth is usually overkill.
I've built something with Lua because the lovely Love2D game lib prescribed it. I hated almost everything about it (globals, stdlib, silly typing discipline, debugging, syntax). Rewrote the whole thing (when it was small) to Kotlin and libKDX (a wrapper over libGDX). Experience was so much better it's not even funny.

Lua felt like JS and PHP had a secret child they abandoned and somehow survived up growing up in a dumpster.

I know I should not bash open source software: I know it takes a lot of work to build/maintain it. I'm merely reacting to this post.
"acid rain" was much easier to fix; there were only 3 or 4 PR firms really pushing it.

"Climate change" has become a cottage industry religion, people will see profits in it for a while yet.
That must depends on location heavily.

While I have not visited the US extensively, I was very surprised when in California at how respectful drivers were with pedestrians, not just stopping for them, but stopping a few meters before the crossings.

Krakow was good as well, but not to that extent.
In France, overall the rural part is pretty respectful, and the bigger the city, the worst it is (in Paris and Marseille, it's not great).

The absolute worst city I've been to in that regard was Naples, were motorists will not stop at crossings unless you actively step in their way.

So yeah, a lot of answers are going to vary drastically depending on what's the driving culture there. Universally motorists will stop at lights, because of that harsh possible consequences of running a light (getting T-boned), but stopping for pedestrians at crossings vary widly.
I would just sit there and repeat "I want a lawyer" until they actually arrest me for something.
why would someone in a single-lane roundabout be checking their mirrors?
Don't forget Iraq. 6000 civilian dead in the first 2 months of shock and awe.

Compare the rates of civilian death too
Apple IS am advertising company. $4b and growing from ads.

https://www.wired.com/story/apple-is-an-ad-company-now/
Grease isn't necessarily a reward, just something to make it quiet. It's been reinterpreted for sure, but wheels aren't bothered by them making noise, why would they care about grease?
It’s a little strange to see 36gb instead of 32gb. I’ll take the extra 4 though.
Stronger type systems can get you a lot of the benefits of formal methods with very little work. A SQLite level test suite is probably still better, but very few projects have the time or budget to do that.
I call for the regulators to stop the US economy because it's making us in europe jealous.
I have no problem with Lua but you forgot to address how it starts counting array indexes at 1 not 0, or is that what your first point is addressing ?
You don’t need raw land transactions. When you buy a house today it is already assessed separately from the land on which it sits.
Thanks for clarifying. I think I am just misremembering how terms were used because of the cohort of people I was amongst and our focus on business models, perhaps.
Read my comment :)
That’s a good point to being up. Apple’s entire pile of cash is just under three years of Google payments. This tells me Apple’s been spending the money on other things. “Replace Google Search” probably isn’t high on their list of priorities, as opposed to Microsoft who seem really intent at it.
Im interested what Chinese tech product companies will do with nearlink standard.
The other question here is how granular these parts are going to be, a board level repair technician might need just one proprietary chip that ought to cost $5, but if their only option to get it is to buy an entire replacement motherboard...
Their pricing starts at $500K (but realistically will be $1-2M per order at a minimum). This is not intended for people who browse their website, click "buy" and fill in their credit card info. If you don't want to talk to a sales rep you were never their target customer, and I'm sure they aren't sweating the hypothetical lost sale.
It’s a feedback loop so it’s both directions.
If you expected to do this for 38 years, you would probably start building better tools. There was a time before Node, and there will be a time after it.
If you have the extra money, pick up a Quest 3. The resolution is fine for reading and writing text and it doesn't require you to use a gaming computer. There are limits to how small you can make the font but I find it to be a comfortable size for both viewing and productivity. Try Immersed since it is free, featureful and designed for productivity but keep in mind there are other options. It works with both Mac and Windows and has good QoL features like an AR portal so you can see where your keyboard and mouse are at when you're in a VR environment. Quest 3 works with SteamVR but you have to make sure you have a good router and an ethernet connection to the computer hosting your Steam library. Be warned that the headstrap that comes with the Quest can be uncomfortable for some people and you will probably want to spend the money on a better after market one. Prescription lenses are also available if you wear glasses.
This would be attractive as a console application. But having to upload a file with sensitive information to CF to have it sanitized makes less sense.

Purpose and fit seems to be lost, here.
Total agreement. Another point: Having the "Dell" name on the front doesn't give you a "throat to choke" as so many people seem to think is important. Unless you're very large scale then, at best, you can threaten them that they don't get your next business. You're certainly not going to get help.

You're no worse-off with Oxide from that perspective. Their open source firmware means that thr opportunity to pay somebody else to support you at least exists.
It would depend on the extent to which the consumer is a willing participant in the trade offs. It’s unreasonable for every passenger to assess the safety of different airlines in making a decision on who to fly with, but if you’re buying a niche smartphone you’re probably more aware of the trade offs.

Also running a small batch of non-RtR compliant phones is probably going to result in a more expensive device than a mass produced RtR device due to economies of scale, whereas I’d guess it’s much easier for a small airline to undercut competitors by foregoing safety checks, so there’s more adverse incentives in the airline case.
At least in the United States we have an official definition of cloud computing: https://csrc.nist.gov/pubs/sp/800/145/final

and that isn't it...
>Question: before Apple invented airpods, how many lithium ion battery powered headphones were in landfills? Nearly zero, because folks used wired headphones.

Bluetooth headphones existed prior to 2016 when the AirPods were released. Wireless headsets for phones were also very disposable. Wireless buds were also poor quality and didn't last.
Their entire point is to be different then that - if you want servers just go to HPE and spec out some servers. (Which really does beyond small scale, but at the rack level it's unheard of)
Mike Pall somewhat famously wrote a Lua interpreter in assembler. Assuming that you can write a compiler for your language in Lua, you don't really have to trust trust, but you do have to trust Mike Pall. I'm not aware of any other raw assembly implementations of modern programming languages, but I suspect there are other examples. The overall scheme (^,~) could probably be replicated by a sufficiently dedicated team if there was interest.

Not exactly easy, but probably easier than a decompiler that produces human-equivalent source code.
Lua is pretty much the standard extension language for tools like nmap, wireshark, DarkTable, Hammerspoon, …

I think it’s doing pretty well and am happy with this fact. I think its success is well justified.

So I’m not sure about it being overly-criticised.
They are trying their hardest, but it's not working.

Perhaps if they can make housing an even bigger drag, it will pull everything back in the next few quarters. But we are not there quite yet.
In my experience you can get surprisingly far with automated fuzz testing and runtime checks. Doing it well is a bit of an art form - it’s quite easy to accidentally write fuzz tests which almost never exercise some code paths. Or end up with fuzzers that spend 99.9% of your cpu checking invariants and things like that. But with a good fuzzer, the ratio of bugs found per line of testing code is insanely high. And they’re much easier to maintain than a big bank of unit tests.

Highly recommended if you want to get more bang per line of testing code.
I guess Outpost is not open source?
I mean, yeah, I was exaggerating a bit. I do make eye contact before walking.

But I swear, I am able to make myself seen to drivers almost immediately at this particular roundabout. Maybe it's the design, or maybe just my neighborhood's culture. Probably both.
AlmaLinux Releases 9.3 Beta
To that effect, https://mynixos.com has been a really awesome resource for docs.

But yeah, the Nix language is definitely not the complicated part. You can get the language down in a day or two with their reference doc. What is difficult is understanding the patterns to NixOS and nixpkg's. Overlays, derivations, packages, flakes.. that's where things get the most confusing.

It's a huge step away from other packaging mechanisms like PKGBUILDs but much more powerful and type-safe.

But some things just aren't thought of, like home-managers `home.sessionPath` for updating the PATH is _append-only_.. so it literally cannot be used to prepend a preferred bin path. So you follow the typical convention as you might already and include it in the shells rc with `export PATH=/custom/path/bin:$PATH`.

Which is the exact kind of safety you'd have today, so it's not worse, it's just another one of the shortcoming of the modules, as opposed to the Nic language itself. The same shortcoming would exist if you used HCL to declaratively define additional PATH paths. It's typically the module design, not the language.
> Is it so difficult to create an object by just setting some attribs and tagging the table with a name?

Is it so difficult to create a struct by just memcpy-ing some data into a malloc-ed buffer and not even putting a tag anywhere? No, it is not. Neither is reading the fields back by using the pre-computed offsets. But people for some reason dislike writing such easy code by hand.
Built entirely without RHEL sRPMs
Hmmm...I actually had to look up what crab mentality meant but I don't see how it applies here. From my quick lookup, crab mentality apparently refers to a reactionary state of mind where a person wants to sabotage another's success even when it doesn't directly impact their own.

In the case of everyone making the same salary, you could certainly still sabotage someone's success but I don't see how having the same salary makes this type of mentality _more_ likely than at a company with a more typical salary distribution.

My concern with everyone having the same salaries is that, potentially, employees have less motivation to excel in their individual work and are more likely to do the minimum to just stay in good standing with their employer and not get fired. Maybe a company can offset the lack of direct financial motivation with more of a team motivation that the financial success of the company as a whole results in financial reward for the individual or some other way of recognizing individual success inside the company.

I am doubtful this flat salary structure will result in a more successful company overall but I do think it's good to try new things. And yes this has probably been tried a number of times before but maybe not exactly like this. Or maybe some other external variables have changed w.r.t. other attempts in the past and this time it works. The typical salary structures we see in US companies today are the result of a large number of trials and errors and learning.
> > "We're pretending security is not an issue." has been the feedback every time this is raised with the Cargo team.

> Do you have a specific link where I can read this response, because this is not at all the responses I have read.

Those aren't people saying security isn't an issue but examples of concerns you have which is different.

For some of those, there are reasonable improvements that can be made but will take someone having the time to do so. While the crates.io team might not be working on those specific features, I do know they are prioritizing some security related work. For instance, they recently added scoped tokens.

For some, there are trade offs to be discussed and figured out.
Static analyzers are NOT formal methods. Reporting no issues just means your tool didn’t find anything, not that your program is correct.
The GDP deflator (inflation adjustor) is lower than CPI. I believe CPI is considerably lower than inflation, so much of this rise is inflation.
I've heard this before. Do you know why?
Interesting work. One aspect that doesn't seem to be discussed is that the formation of mentor-mentee pairs is not random. On average, in the realm of physics and astrophysics that I'm familiar with, it's more challenging to secure a position with a high-impact scientist than with one of lower impact.
I agree.

And that's one thing I disagree with the SQLite guys on; I build with all warnings enabled to get me a "stronger" type system in C. I get stronger warnings against pointer casting and things like that.

But "a lot of the benefits" is still maybe about half of the benefits of full formal methods.
I don't really think 2 bedrooms for $3k, in Metro Vancouver would be a likely find. I'd say even if you're willing to sacrifice literally every other characteristic, but usually if you're in that range now you're looking at very high condo fees or something like no laundry in building.

But again, if space is literally all you're after, and you might be for all sorts of perfectly valid reasons, then that might be your choice. On the flipside, it would be weird for us to work relentless and double or more likely triple our monthly expenditure while basically getting only marginal or specious value for that money.

For example, even if the numbers or stability on our end made sense, and committing to that wild increase in cost didn't increase our exposure dramatically, we'd still be trading triple our shelter expenses for the added utility of basically one room and the power to knock out a wall or something.

No matter how you spin it, without a huge pool of cash and unrealistically high income(s), or a bunch of people subsidizing your mortgage, it's not impossible but generally not a sensible move unless you absolutely must own something for some reason.

I can theoretically earn above $100k, but it doesn't really matter unless that's sustained for a long time with few breaks, and that's not happening enough to bet on, such that I'd take out a mortgage expecting that income to be there long-term.

I'm not sure it's doomerism, as in, I wasn't saying things were "hopeless", just unrealistically demanding to attempt pursuit of what used to be considered a standard gradual path of upward growth. I live where I do despite that, and basically will until it's not feasible to do at all, along the way we'll have to face some seriously tricky choices anyway unless we can find someone else's basement to live in till at least our mid-thirties.
That's not even being studied right now so give it 20-25 years before it's even considered as a long term diet. Also we have to keep them sane as well as simply alive and good food is a big part of long term mood maintenance. You're going to be asking people to eat this for at least 7 months if it's a 1 way trip and you have a working food system on the other side.
That's _wonder_-ful to see. I love the idea of being a "lifer" but I just can't see it happening for me. I like working on a variety of different things, but I think a lot of modern software won't have to make drastic changes the same way these devs did, moving from platform to platform and starting from scratch each time. Also, there's just too much financial reward in switching companies early in one's career (here in the US, at least).

I'd be interested to hear from some folks that have been with their employers for quite a while here in HN and what makes them really want to stick around.
Also learning the power of includeIf

At home (I mean a personal box I for personal project and some other public contributions), my directory structure is like:

~/sources/forge/organisation/project

where `sources` has the same meaning as your `/home/user/projects` ; and your example will end up here to

~/sources/github.com/victorb/neat-project

The structure used has some great influence on solution adopted I think :)
> Static analyzers are for when your test suite is subpar.

No, this statement is quite wrong and expresses a failure to understand the roles and responsibilities of each class of automated tests, and the purpose of static code analysis tools.

Automated tests and static code analysis tools are complementary tools. They don't share responsibilities at all. Just because both can run in the same pipeline stage that does not mean they serve the same purpose.
What happens when you vectorize wide PyTorch expressions?
Western employers don't deliberately reward people who job-hop, but their actions actually encourage employees to job-hop.

- Not investing in people enough (e.g. training)

- Prefer outside candidates to internal promotions

- Not willing to give significant raises, but willing to hire new people at a higher salary

All those actions end up rewarding job-hoppers, even if it's probably not the intended goals behind this employers' behaviour.
We need to go there so we can study it properly. What would the Victorians, or Columbus, think of us if they saw how we gave up after going to the moon a few times.
Not going to respond to the ad hominem flame war comments but I’ll just add, it’s about relative choices, hence why I still use a Fitbit.

I can see how each public company makes money and can examine their technical decisions. I’ve been working in wearables and healthcare, for instance, since 2010. Fitbit sends all data to the cloud then updates your data in your app. Not a huge deal and provides nice API opportunities. But as soon as Google takes over that data explicitly, I expect it will be used to advertise to me, despite the assurances to the contrary on the acquisition.

By contrast, Apple chose to develop a strong privacy model for health data on the Phone. They certainly didn’t need to and could have readily chosen the same cloud-first implementation. But they didn’t. And the APIs are harder to work with as a consequence. I respect and appreciate those decisions and so I buy their products more. You may choose differently.
Thanks for sharing! I have heard similar feedback from others.

What if it wasn't broken or confused and it worked immediately...like for example you don't just generate the code as output, instead it is immediately deployed and usable?
I would expect someone serious about this to have their spyware built to use the cellular to send the low bandwidth, high value stuff and then possibly wifi for larger data dumps.
I like it especially if it is a genuine attempt at integration and not a way to force poor immigrants out of desirable real estate.
Gotcha, I was wondering if there was a deeper or more concrete connection between these particular trilemmas. It'd be interesting if there was seeing as how both are related to coordination, though I'm not so sure there is one.
I love the potential of AI agents. Thanks for sharing!
US GDP apparently includes capital gains. A bell-curve of income expanding on the upper-right half?
"Private cloud" as a term still kinda makes me itch, but I don't recall encountering an alternative that was more obvious and it's clearly the usual term of art at this point.

I suspect that while I do appreciate how some posters upthread find the website a tad on the vague side, the target customers-in-potentia will understand it fine.
I live in a big house full of roommates and they think I am crazy when i ask to be given any trash that has a battery.

No I am not hoarding your "disposable" unrefillable vape pens with lithium ion batteries, I recycle everything properly.

How these vape pen businesses are still in business is beyond all rationality. They should all be shut down until every single vape pen is recovered from the dumps around the world.

I don't work in waste management, hopefully they have a process that captures these e-waste devices down stream. But I doubt it.
Are you the author? Can you give any insight about how you made it?
To be fair, OpenSource troubled the waters around what constitutes free software.

Free(dom Respecting) Software wasn’t just about the source code.

https://www.gnu.org/philosophy/open-source-misses-the-point....
There are plenty of ground-based missile defense solutions for NK (aircraft and drones near NK are also an option if boost-phase interception is considered critical when their program advances).

The problem with space-based orbital missile defense is it necessarily threatens the entire planet while being predictable and easy to shoot down with relatively small missiles. Those anti-satellites attacks, which are justified by threatened countries, lead to a cascade of space debris, that leaves an unusable space environment for centuries and may in itself trigger nuclear conflict.

Not everything has a technological solution. Staging weapons in space is not a path to world peace, it just heightens the stakes and shortens the escalation. As Israel learned, you can try to seal off your border and your sky, but there are always holes. There are many ways NK or Russia can deliver nukes besides ICBMs. Dreaming of a shield in space is a false promise. Building bridges rather than walls is the only path to peace.

If the U.S. can be a model for the world, it is not it's military might to emulate, but the idea that people of all nationalities and backgrounds can come and live together and resolve their differences. It is possible!
Why? They should be forced to release schematics, software, and firmware if they can't handle the repairs themselves. This will allow someone to repair it without assistance from the manufacturer.