fivea

>>C++/boost could have a bad actor upload malicious code. The only difference is that people probably wouldn't notice for months, because everyone's running decades old versions of boost anyway. Not because they're mindful of security, but because nobody can bother to update it unless the need becomes dire.

This baseless assertion is quite wrong and completely detached from reality. Boost is not a one-man show which is a git commit away from disaster. Boost is a commmunity-driven project where any change to an existing package is subjected to a public review and proposals for new components are performed through a submission process.

https://www.boost.org/users/faq.html

> Why? It's actually 50/50.

Is it, though? I'm sure it's not, and the ratio of women to men is much much lower. I know of a FANG which rejects male candidates with PhDs but goes to the extents of admitting female candidates with a single boot camp on their resume, and even then most teams barely have more than a couple of women in their ranks.

> yet the npm attack of today proves otherwise.

If you're referring to the colors package in NPM, that is not an attack at all nor did it proved what you think it proved. If anything, the colors package episode just showed that there are companies mindlessly ingesting dependencies without a shred of due diligence.

>>I think you’re being far too kind in your interpretation. If one wishes to stop maintaining, all you must do is nothing.

This sounds like a gross misrepresentation of what happened.

It has been reported that the author of the colors and faker packages announced last year that he was no longer willing to do free work for Fortune500 companies.

He also proceeded to state quite publicly that either companies paid him for his work, or they should fork the project and maintain it themselves instead of taking advantage of everyone else's work.

After a year has passed, the author proceeded to release a couple of major versions that had a more artistic feel.

https://web.archive.org/web/20210704022108/https://github.co...

Source:

https://www.theverge.com/2022/1/9/22874949/developer-corrupt...

These packages are his circus, and his clowns run the act he chooses.

If anything, this update showcases the completely abhorrent security culture in place in these mega-companies, which literally ingest into their product line anything that they can find on GitHub without a shred of due diligence.

> The problem is bloat in the dependency tree. Nobody wants to individually vet a thousand plus library authors and enterprise/government or just anyone who cares a lot about supply chain security is not likely to consider "number of downloads" on crates.io a reliable proxy of trustworthiness.

That problem does not magically go away with a bloated stdlib. Take Java, for example, with it's colossal list of standard modules, with which Rust cannot possibly match or even rival. Yet, any reasonably sized Java project still ends up dragging in dozens of third-party modules to the point that not using a dependency management system is unheard of.

> The issue of having a thin library is that one then ends like the relationship POSIX has with ISO C.

It should be noted that the vast majority of participants on that thread do advocate against bloating Rusty's stdlib, and they point out a very thorough and convincing list of prior experiences from other programming languages that justifies this stance.

It's as if they learned from other people's mistakes and bad experiences.

> He is saying it went from "we should have more vacation" to "we should send mangers to gulags"

I've been following /r/antiwork for a while and I never stumbled upon anything remotely similar to the story you've made up. Practically all comments are in the line of "good for you for quitting", "you should have done it sooner", "why even put a two weeks notice?", "You should talk to a lawyer to not get screwed over". But feel free to link to posts that support your personal assertion.

> Is it really ao hard so believe non skilled jobs have it this hard?

What makes this gaslighting attempts so mind-numbingly pathetic is the fact that even some FANGs, which are supposedly references in terms of high-quality, highly-paid work, are renowned for their poor working conditions and hiring processes. And they have been known for that for around a decade, now.

If this is an expected occurrence in high-quality work in fields where the job market is firmly on the worker's side, why are these guys trying to fool everyone into believing that abusive workplaces are completely unheard of in other less fortunate sectors?

> I find it funny how so many HNers suddenly jump out of the wood work to respond to allegations that these subreddits are supported by foreign troll farms.

+1

I mean, the /r/antiwork subreddit features mostly posts reporting how people quit their jobs following a history of workplace abuse, or red flags during hiring processes.

Moreover, the subreddit isn't even exclusive to reports from the US.

Are we now supposed to believe that there is no such thing as a bad interview or poor working conditions anywhere we look?

Why are these accounts so hell bent on gaslighting everyone into thinking that there is no such thing as an abusive boss, and quiting a bad job or rejecting a job offer is unheard of?

> What a stupid post. If your first reaction to someone questioning a broad social movement in 2022 as a conspiracy theory (...)

From where I'm standing, the stupidity that stands out is how some people are desperately trying to gaslight themselves and everyone around them by trying to depict people chatting about workplace abuse as being something outlandish and utterly inconceivable.

I happen to stumble upon posts from /r/antiwork and I have to say that personally I had the misfortune of experiencing far worse than what's reported there on any random day, and in western European countries where workers rights actually exist and are enforced.

> Frankly, I would not be surprised if millions of Russian bot accounts are behind this sub.

Do you honestly believe that it's impossible to find a few thousand persons from the US who have bad experiences with recruiting and/or bosses, or experience any sort of abuse at the workplace?

I mean, given how widespread is at-will employment in the US, and how that ensures employers have all the leverage they can possibly have on an employee, specially in high-unemployment regions, isn't abuse a natural occurrence?

More importantly, a hefty share of posts in /r/antiwork are about workers quitting abusive jobs or reporting bad interview experiences. Who in their right mind denies this sort of stuff ever happens?

> Is there something like this for jq?

It's a filter. You can name-drop math stuff and even mention monads and the like, but it's just predicates, maps, a reductions.

Also, I'm not aware of a single person who ever looked at relational algebra beyond the introductory lessons of a relational databases 101 course, and even then that stuff was mostly in the way.

> Effectively Covid stimulus may have forced the government to step in, releasing the inflation QEs been brewing.

Not quite. QE created inflation in assets that are not a part of inflation indicators, at least directly, like stock and real estate. QE resulted in phenomena like Tesla's utterly absurd meteoric valuation during the past year.

There are some markets where QE and stimulus checks, such as rent prices, which mixes an increase in disposable income on the demand-side and a need to validate inflated investments in real estate on the supply-side.

> I couldn't disagree more, I think bash is a horrifically bad programming language.

Bash is described as a "command language" and not a programming language per se.

Bash is what you use to type in commands, and automate said commands if you need to whip out a quick script that runs what you would otherwise run manually. Bash, scripting-wise, is command line glue.

If all you want to do is run commands with some logic, PowerShell is simply dreadful and outright developer-hostile. I doubt there is a single person on earth who uses PowerShell as a command shell like Bash is used.

> Windows comes with PowerShell (...)

It might be just me, but PowerShell feels outright developer-hostile even when compared to Bash. Perhaps it's their approach to rely primarily on .NET stuff which makes things so arcane, but when given the option it's far simpler and better to go with, say, python than PowerShell.

I absolutely love gron, but I have to confess I feel dirty when I use it. It's unashamedly a brute-force tool in a world with plenty of elegant alternatives, and the main reason to use it is pure laziness to just shamelessly grep stuff around. And I love it for that.

> For example how would you take key k1 from a list of dicts [{k1: v1, k2: v2}, {k1: v3}]?

Do you mean something like:

    .[].k1

Give it a try.

https://jqplay.org/

jq does have a learning curve, but just like any query language, including SQL, first you need to learn the basics of the query language in order to get things to work.

In this case:

* you know that .[] iterates over objects, so you use it to unpack the root array,

* you know you get a stream of objects, thus from those you use the .k1 filter to get the values of each k1 key.

Here's jq's manual on basic filters: https://stedolan.github.io/jq/manual/#Basicfilters

After you get jq to filter out what you want, you can work on getting it to output results in whatever format you wish.

> But it has occurred. People were originally calling it "short term" but its clear that the 6-7% inflation seen at the tail end of 2021 was very real.

I'm not sure those are related. I bet that was just one of the unintended consequences of stimulus checks in the US economy.

Keep in mind that poverty in the US is increasing like wildfire. In 2019, about 69% of Americans reported having less than $1000 in a savings accounts.

https://www.yahoo.com/now/survey-69-americans-less-1-1719272...

That falls well within living paycheck-to-paycheck territory, if not even below. This means the vast majority of Americans cannot afford luxuries or even basic necessities. Things haven't got better for the average Joe since 2019, too.

Then all of a sudden the whole country received a comparatively huge check in the mail to freely spend however they feel like it.

Expectedly, this sudden increase in disposable income and purchasing power will reflect in a hike in demand for the things being tracked by inflation índices. Increases in consumer demand lead to higher consumer prices, and thus inflation indicators go up.

> I don't really see how that interacts with the quote you picked about companies with improving margins.

Companies are being valuated with total disregard about their results.

The whole stock market is currently in deep memestock territory. We are seeing a single low-output car maker being valued more than the whole car industry altogether even though they exclusively serve a car market niche that only amounts for a single-digit market share of the global auto market.

Real estate is suddenly seeing an influx of institutional investment that hiked the demand so much it priced out the vast majority of families.

In crypto, everything is unashamedly driven by a mix of speculation and capital flight to an asset that's believed to be resilient to inflation and crashes.

We're fooling ourselves if we believe that we saw such a massive hike in efficiency in the past few years, specially given the global context. What we're seeing is a massive influx of free cash into the hands of institutional investors who are now desperate to park it somewhere.

> More interesting to me is how many people build their own 3D printers, but nobody ever builds their own 2D printer.

The cheapest commercial 3D printers sell for hundreds of dolars, while you can buy a cheap printer with wifi and bluetooth and a scanner and mobile phone app to boot for about 50 dollars brand new. Used ones can't even be given away for free.

Furthermore, you can print whatever you want in printer stores for a few cents a page.

Also, 3D printers are much more forgiving regarding low resolution output.

> Couldn't agree less. Having used Hinge vs Tinder. It's a huge ergonomic difference.

Indeed that comment read like an unashamed sour grapes excuse.

> What if the economy is "broken" but not in a way which produces a "crash"? Prices are higher now, but many companies have improved margins; they're raising prices faster than their costs are increasing.

There is a less charitable and more realistic explanation for that: quantitative easing injected a massive amount of cash into the economy, and low/negative interest rates are pushing said investors towards riskier investments to park all that cash. Consequently we see a massive volume of institutional investments in things like real estate, the stock market, and even crypto.

> That puts it at an energy return on energy invested of around 9, which is pretty damn bad.

Is it, though? That sounds pretty awesome, specially as renewables lower/eliminate energy imports thus improve a country's balance of trade.

Also, one aspect of renewables that results in energy dissipation/loss is energy storage. Wind and solar farms generate energy that don't coincide with peaks in demand, thus that production is stored and reintroduced in the grid resulting in a drop of efficiency. However, it would be stupid to argue that losses from, say, restocking the reservoir of a pumped storage hydroelectric plant, specially one which has been retrofitted as an energy reservoir, makes the technology worse than only generating power during periods where demand surpasses supply.

> (...) but it was basically to use this instead

Base32 is a representation format which provides a textual representation of numbers, not a storage format.

I mean, anyone is free to dump Base32, or even base 2, into a string and just run with that, but that would be highly inefficient.

> On the one side they replaced the flat fee which was paid for electricity produced to a complex auction schema (...)

Aren't you referring to the initial subsidized program where private companies were enticed to invest their own cash in renewable energy sources in exchange for assured profitability during the initial period?

> Where are consumers able to get paid for using electricity?

You mean the kind of service companies like PG&E are already providing their customers?

https://www.pge.com/en_US/residential/solar-and-vehicles/gre...

> I’ll take contaminated mushrooms and wild boar to climate change and the large scale disease brought on by fossil fuels.

It's a good thing, then, that that's a false dilemma and nuclear and/or fossil fuels are clearly not the only options on the table.

As a reference, Germany already relies on renewables to supply around 60% of their energy needs, and it's production is still ramping up.

> thanks to nuclear plants shutting down and CO taxes, we are starved of energy.

There are countries which already started transitioning to renewable energies which not only endured long periods of energy independence from renewable sources alone but also already reported energy production surpluses which even led to null and negative energy prices.

Therefore your baseless assertion regarding shutting down nuclear and coal plants seems to be totally made up and completely unfounded.

Can you provide any basis for your assertion, and point out any rational basis for that so-called "energy starvation" scenario?

> In Germany, the previous government has done a lot to stall further builtup of renewable energies.

I find this assertion hard to believe. Merkel has been in charge of Germany's federal government for the past two decades, and throughout this period Germany's energy production from renewable sources has skyrocketed from virtually none to the leading energy source, with a share of over 60% of the nation's energy production.

In fact, if anything, Germany's production from renewables has been accelerating.

https://vizzlo.com/gallery/time-series-graph/example/power-g...

Could you provide any source that supports your assertion that the previous government has been stalling renewables?

> That's a pretty shocking stat too!

Is it, though? It sounds like plain old production costs.

I mean, unless you build a coal plant right into a coal mine, a natural gas generator at each gas well, you don't store any surplus wind power... Energy is needed in parts of the energy production chain to keep it working.