skysight-inc/HackerNews huggingface dataset:
Oracle cannot ignore annoying and low-expected-value static analysis tickets, but:

1) the answer should usually be either "fixed in this patch, install it" or "it's a false positive, try developing an actual exploit if you don't believe us". Not expensive, provided Oracle actually runs static analysis tools against their software and addresses the findings before releasing updates.

2) If Oracle actually runs static analysis tools against their software and addresses the findings before releasing updates, there should be very few tickets of this type to begin with, often from the debut of new tools or from naive user mistakes. Finding something, and worse finding something over and over again, means that Oracle QA is inadequate.
The Alphabet by the-alphabet
I had never seen input.* before so I checked it out. I was pleasantly reminded of the variety of user-cases when I read this comment:

"I accidentally installed a prank addon/script (can't remember the name or which one, though it did come with a clear warning). Now my Facebook comments are garbled (scrambles text (makes it worse when I use punctuation-multiplies it). Please use and add some malware cleaner in some future update to get rid of this nasty prank script/addon. I use Stylish addon and I'm guessing I got it from this! Makes using Facebook defunct and troublesome!"
For small multi-tenant apps, we use one database per customer. It's simple and works pretty well.
Namespaces are a nice idea but almost all XML libraries make them unnecessarily cumbersome by requiring full specification everywhere. I sometimes wonder whether just fixing that would have made XML more popular after having seen so many people try to write something like a selector using the format in the document (ns:element), burning time until they learned that you have to use FULL_URL:element and in some cases even declare the namespace names you can't use.

No, it's not the biggest challenge but it's so transparently a case of conplete disregard for developer productivity that I've heard it mentioned by a lot of people as why they avoid XML.
The advantage of JSON is that it's way easier to handle because it maps directly to structures that are available in every common programming language.
Axis Mundi – A secure, resilient, distributed and open communication platform
> For example you can no longer set the User Agent string on a per site basis natively in Firefox preferences [0].

This seems like a uselessly fine-grained control. I was surprised to hear that they ever supported it.
"Unapproved views"? Would you oppose firing someone for openly expressing white supremacy?
How about that! Then they need to publicize it. Make a website, say, jmpp.org (pronounced "jump") and a reference implementation.
Multiple contributing errors it seems:

https://en.wikipedia.org/wiki/Fukushima_Daiichi_nuclear_disa...

wo emergency diesel generators were available for each of units 1–5 and three for unit 6.[65]

In the late 1990s, three additional backup generators for Units 2 and 4 were placed in new buildings located higher on the hillside, to comply with new regulatory requirements. All six units were given access to these generators, but the switching stations that sent power from these backup generators to the reactors' cooling systems for Units 1 through 5 were still in the poorly protected turbine buildings. All three of the generators added in the late 1990s were operational after the tsunami. If the switching stations had been moved to inside the reactor buildings or to other flood-proof locations, power would have been provided by these generators to the reactors' cooling systems. Because the generators had to work at full power, when the wave hit, the crankshafts shattered and the system collapsed. These brittle crankshafts are also used in British reactors.[66]

The reactor's emergency diesel generators and DC batteries, crucial components in powering cooling systems after a power loss, were located in the basements of the reactor turbine buildings, in accordance with GE's specifications. Mid-level engineers expressed concerns that this left them vulnerable to flooding.[67]

Fukushima I was not designed for such a large tsunami,[68][69] nor had the reactors been modified when concerns were raised in Japan and by the IAEA.[70]

Fukushima II was also struck by the tsunami. However, it had incorporated design changes that improved its resistance to flooding, reducing flood damage. Generators and related electrical distribution equipment were located in the watertight reactor building, so that power from the electricity grid was being used by midnight.[71] Seawater pumps for cooling were protected from flooding, and although 3 of 4 initially failed, they were restored to operation.[72]
Implementing define in a way that allowed it to be used was one of Scheme's innovations relative to some of the other Lisps in the 1970's. It's idiomatic in part because it is easier for new programmers to read and Scheme historically and SICP perpetually are targeted at newer programmers.

Clojure most definitely is not. It's not an accident that Clojure's fn is only two characters. It's design as a language encourages anonymous functions. Along with recur there are many fewer cases where the simpler ways to do something require a name.

The fundamental problem of trying to port SICP to other languages is that SICP is not a book about programming in Scheme. It's a book about software engineering, and the points about software engineering are made in ways that can be readily illustrated in Scheme. Cons is used to illustrate engineering ideas, and while those ideas could be illustrated in Clojure, there's an impedance mismatch between cons and the roughly analogous constructs in Clojure. Part of the baby gets thrown out with the bathwater for little advantage...understanding Scheme probably makes someone a better Clojure programmer, while the force fit of SICP into Clojure probably won't.
I don't know. Namespaces can be complex, yes -- if you use them. You are not obliged to. Also, XML schemas and XSLT are immensely useful (the lack of schemas is one of the most annoying issues with JSON).
404 Error now

http://webcache.googleusercontent.com/search?q=cache:https:/...
It's chess, not checkers. One move at a time. Also, minor, but Fiber would be an interest point for anti-trust, just not in the EU.
I don't know if he has edited the original, if not, then sorry - I should have quoted 'hard'. (Not that it's unclear for anyone what I was referring to.)
http://webcache.googleusercontent.com/search?q=cache:https:/...
Show HN: Girl – GitHub README link checker
While I'll join you in demanding the kids off our lawns, I'm looking forward to seeing 120V AC run through the very last serial port. There's nothing like sending a message down the serial power and seeing nothing come back. So many wonderful ways to fail.

Does this device require a null modem cable?

When the manual said that all commands needed to be terminated with a '\n', did they actually mean "\r\n" and not mention it?

Am I sending ASCII bytes to a piece of hardware that expects strings of UTF-16, without documenting it?

Did one of the students swap the cables and I'm just talking to a deactivated motor controller?

Has this particular serial cable finally bit the dust?

Is the hardware expecting me to transmit data on pin seven for some ungodly reason?

Did one of the students swap the the detector cable and the pre-amp high voltage line and fry the board I'm trying to talk to?

These are all issues that I've had to contend with on serial communications. The big catch is that it's usually not just one of these problems, so I wind up needing to check every possible combination. Having a device on USB saves me a boatload of trouble. The devices hooks up to the computer through a single, standard type of cable. If I can see the device after I plug it in, it's a software problem. If I don't see it, there's a hardware problem. Just from the above scenarios, seeing the equipment NOT connect eliminates 75% of the phase space for the problem. If I DO see the hardware, I've cut out 96%. So much easier to debug with USB.
The only exceptional circumstance is Assange's arrogant assertion that he deserves special treatment. No reason why the Swedish justice system should kowtow to his demands.
I'm more surprised it was posted!

(at least in ~current~ as-it-was form)
Every user should be permitted to disable that requirement: it's his browser, not Mozilla's.
How to hack the startup lifestyle, tips from two modern hippies
To note, there is a client-side workaround that allows whitelisting of ALL unsigned extensions (they might consider creating a whitelist of UUIDs or something "humans" can handle like the name of an extension). I was able to change the following and uBlock and Ghostery immediately started working in the "Aurora" build: go to about:config ; set xpinstall.signatures.required = false
> Seriously, the wallet thing is both amazing and terrifying. Apparently the only thing standing between me and sending all my worldly wealth to a wechat contact is a six-digit PIN.

Indeed. My internet banking account (that my employer gives me) has the same PIN as internet password. Change the PIN at the ATM, and the internet banking password also changes. Change the internet PIN, and the ATM pin changes. Damn, they're the same.

BUT...

Do as locals do and maintains multiple bank accounts with different banks, and multiple credit cards with different banks.

This is not unique to China, but is also the case here. And it doesn't come from internet security, just from 'this is how it has always been done' via various banking promotions and access to local branch (China's banking network is, by policy, branch and region based). But it works here. I know no one that even keeps all their money in the same account, let along allows access to the same account via WeChat.

The big issue: WeChat is Tencent's bid to become a bank with full suite financial services. It will work against monoliths like Visa and MasterCard, even UnionPay. Because they don't bother with charging a transaction fee. What merchant doesn't like that?
> I'm just not seeing this. Even without mobile-style push, apps like Conversations appear way down the list in Android. Note that because XMPP maintains a continuous TCP session (or WebSocket, or whatever), then you get "push" in a general sense; that is, there is no polling.

> Using an XMPP client on your mobile will, of course, have an impact on battery life, but I don't think a good client will drain your battery. For me, Conversations uses less power than Solitaire according to Android.

I don't know how accurate Android's power estimates are, but I consistently have people telling me that they are switching back to proprietary messengers because every XMPP client they've tried drained their battery. Whatever causes it, there's a real problem here.

> (2) I'll agree that XML does make the development of XMPP libraries more complex, but we gain because it grants very simple permissionless extension capability, and that's hugely valuable. If developers working with (rather than on) XMPP are having to hit XML directly, that is absolutely a problem.

The problem is that theoretical future benefits are worthless if you never get a base implementation going. XMPP is just too hard for many developers - it's not a thing that you're going to understand well unless you work on it full-time, and that's not acceptable for a protocol.

Hitting XML directly is almost always a requirement. Libraries are woefully incomplete due to the large number of XEPs, and to implement anything yourself, you must understand the XML structure.

If the intention of XMPP or XMPP frameworks was to abstract away the XML, then they have failed.

> Finally, resources are the way they are for all sorts of reasons, but Message Carbons really does work for having conversation sync across multiple devices. I often walk away from my desktop and continue conversations on my mobile and/or tablet, and wander back to the desktop when I feel the need to continue with a keyboard.

I experience constant issues with OTR, most servers don't seem to even support message carbons (nor do major clients like Pidgin have any useful indications of it), and frankly, I have never seen a single 'regular' user get synchronization set up correctly.

This is really a pervasive problem in the XMPP ecosystem: everything is too hard. Little to no thought seems to have gone into the UX, and unless you are an 'experienced XMPP user', you really have no clue what is going on. The experienced users say "meh, works for me" and don't set out to fix it.

This is true for the frameworks, the clients, and most of the servers. It's just all-around user-hostile, and that needs to change.
Very insightful article from Ben. Although the conglomerates are not in vogue at the moment several conglomerates dominate the business world: GE, Siemens, etc... Actually I see a lot of parallels between Googles maturation and say GE's. Both started with a niche product but then diversified into more complex systems as they matured.
XML is unnecessarily complex but I think JSON also is.

IRC and MSNP (the early versions, before they started XML-ifying everything) are what I'd consider a good format protocol for the application - a mostly line-based, textual one you can use pretty easily without any client more complex than netcat. They are also extensible enough even without XML.

(Personally, I think it is absurd that a protocol needs to wrap a single text message, the most common form of message that would be encountered, in several times more bytes than the message itself.)
2-3x the memory use and lower performance due to the additional overhead of talking between processes.

There are advantages, but it is not without its disadvantages.
I appreciate that it's starting to get off topic, but in my experience the problems with Apple Music isn't related to whether the sync is automatic or not.

The issues that I run into are UX issues (not sync related), and what I've heard is problems with what the server does once a sync is finished (automatic or not).
Dark Fiber for the U.S. and Europe
readability extension i miss you so much
It was a long time ago, so I don't remember perfectly, but yes - this was the situation.
You're being pretty grim. Hello is fucking awesome, and while I don't use Pocket it isn't the end of the world. Firefox isn't Lynx, but even as a Unix guy I enjoy and appreciate it. I also appreciate that they're trying to be more attractive to the masses, which is societally beneficial.
The Lifecycle of a Revolution [video]
Ask HN: What's best methodology to work on side projects for a solo developer?
> I don't see any outbound traffic on Fiddler

Be aware that software can choose to not use a system configure proxy. It's a good tool to use, but absence of traffic in fiddler is not a definitive result, not least because it's tracking http traffic only. Wireshark is probably the next best option.
tl;dr It's being worked on (or already solved), but I'm sure the XMPP community welcomes additional contributors.

1-3. Could be solved with upcoming versions of XEP-313 MAM.

4. e2e There is currently a XSF GSOC project running, bringing axolotl to Conversations (and eventually describing the protocol as an XEP).

5. There are a few standards on how to perform encrypted file transfers, but implementations are lacking. You are invited to code one.

6. XEP-357: https://xmpp.org/extensions/xep-0357.html
Firefox is open source. Disabling the signature check will probably be a one-line change. Yes, it's a much larger barrier to entry (building Firefox is not trivial), but it's not like IE or Chrome where you have no choice in the matter at all.
JSON name conflicts are easily resolved by giving every extension its own key in the object. That's the equivalent of namespaces.
8 email marketing tools that communicators 20 years ago could only dream of
The Founding Father of Liberland
I was in a situation where they were selling something to a business leader that my side of the org wasn't in favor of buying (5x cost difference). I drew the short straw and got to meet with them and the business leadership people.

In the meeting, I literally had this dude and his presales guys in $5000 suits sitting across the table from me, berating our position and demanding (quote was "You have no fucking business saying no until you provide us with <our numbers> so we can do your ROI") all sort of crap from us. Ended up prodding the salesbot and let him run his mouth for awhile until he said something really stupid that ostracized the business folks on our side.
I don't believe there's anything in it that would prevent that. If you squint, the auth exchange looks a lot like SASL, and that supports pretty much anything.

This is something we'll gain more experience with at FastMail over the coming year. We'll be sure to share that experience.
Oracle's, not Cisco's.
Could be a ploy like how many scammers use poor spelling and grammar so that they don't waste their time chasing up people too smart to fall for the scam.

Except it is if you are really concerned about security or have a backbone Oracle don't want to waste time on trying to sell to you.
Do you actively block then grant-access to everything, or just periodically check what's happening? I've tried the active filter before, but found it to be very disruptive to my typical workflow.
> every non-trivial software is a compiler

Actually this is even more true than you probably think it is.
What's the return on investment for supporting open source?
Theoretical CS is usually not thought of as an experimental or empirical field. When a paper in that field claims "X does not exist", this has to mean that the inexistence of X was proven, not that a body of empirical knowledge against the existence of X has been collected. By contrast, such things are called "plausibility arguments", "heuristics", etc.

There is such a thing as experimental truth, but it applies to experimental fields, and theoretical CS is usually not thought as one of them. I still think it is misleading to claim that the inexistence of something has been proven if it is conditional to another hypothesis.
Adobe Audition CS6 Crack with Serial Number Free Download
Is anyone able to give some insights for non US citizens that have options of an American company but work overseas with no american employment contracts. Thanks!
Doesn't it make sense that street hails would be lower in areas with a lower rider density?
IRC has major issues, actually - notably, it's very tricky to parse correctly (and very easy to think you're parsing it correctly when you aren't), and doesn't support more than one space-containing value per 'line'. It's also implemented differently by every single server.

You will need some kind of serialization format for a reliable message protocol. JSON is just the simplest possible format that can reasonably represent common data, and works in 95% of the usecases.
This is covered in the article. Sweden has now (as of March) said they would be willing to interview in London.

http://www.aklagare.se/In-English/Media/News-in-English1/The...

http://www.thelocal.se/20150618/swedish-prosecutor-cancels-a...
Ask HN: New mirror for Arch Linux?
Is anyone here who has some spare space/bandwidth on there company network that could create a better mirror(s) for Arch Linux community ?

The list of mirrors now; https://www.archlinux.org/mirrorlist/?country=all&protocol=http&ip_version=4&use_mirror_status=on

Official Mirrors Guide:
https://wiki.archlinux.org/index.php/Mirrors

Most of them are very slow. Thank you!
> I don't know how accurate Android's power estimates are, but I consistently have people telling me that they are switching back to proprietary messengers because every XMPP client they've tried drained their battery. Whatever causes it, there's a real problem here.

You have to differentiate between the specification and the implemetation. Nothing in the XMPP specification prevents you from implementing a battery friendly XMPP client. But some implementations suck/have room for improvement.
You know, there was something beautiful about users being able to pick up a tutorial and extend their browsers, if they wanted. There was something very empowering about being able to write extensions even in a corporate environment.

I've written Firefox extensions for personal and business use, and Mozilla are preventing that from every happening again. Why? Cui bono?

I'll mention, again, that they completely broke the security of Firefox Sync: it's no longer a trustworthy place to store passwords. Why? Cui bono?
Isn't Uber really replacing calling a car service or taxi then?
Wechat is shit. why Line has been blocked in China?
I went to a prominent tech school that adopted an Oracle platform for student course management in my last few years. I won't mince words: it was a piece of shit, and my school's administrators ate shit by agreeing to a contract that forbid them from making any changes to Oracle's broken system. Now I work in college administration and we have to deal with the very same pile of junk.

Someone once told me that Larry Ellison is the biggest asshole in Silicon Valley, and also the richest, so he must be doing something right. The same could be said for John D Rockefeller and Standard Oil. Is the world we have the world we want?
At a guess, it's because it's a Rocket Internet company and the group generally does not like operating in the US for a variety of reasons (chief amongst which is that their business model is to execute ideas in emerging markets, not developed countries).
> No, it's not the biggest challenge but it's so transparently a case of conplete disregard for developer productivity that I've heard it mentioned by a lot of people as why they avoid XML.

This is the core issue with XML/XMPP. UX simply doesn't seem to have ever been a factor when designing either of them - whether towards the developers or the end users.
FWIW, I added the following to the Wiki page when I saw it was on HN, which might help give some context to what you're reading:

Hi. I'm Dave Cridland. There's a note just up there which says "(Draft blog post)", and that's been there from the start - but when I asked for some feedback from the public standards@xmpp.org mailing list, people posted it on Twitter, and then it got onto Hacker News. Which is all cool, it's not secret, but...

This has not been properly reviewed yet (though the community is starting to), and so may contain inaccuracies, errors, or simply bad wording that's inadvertently as misleading as some of the comments I'm trying to rebut, and so feedback is genuinely welcomed.

Also equally welcome is feedback of the kind that says "Yeah, but I think that XMPP is entirely made by KILLING KITTENS", or whatever, so I can either write a rebuttal, or agree with you and try to get the community to fix it.

This is, currently, my personal opinion, and may not represent that of the XMPP community or the XMPP Standards Foundation.

Just for the record, I don't think we kill any kittens.
The elephant in the room is WeChat and mobile. Has been for 3 years.
Or protobuf over TCP.
The post seems real, by comparison with other articles in the blog: in particular similar silliness and dislike for security advisories in https://blogs.oracle.com/maryanndavidson/entry/is_your_shell... and similar anti-reverse engineering stance in https://blogs.oracle.com/maryanndavidson/entry/mandated_thir... and https://web.archive.org/web/20140123033110/https://blogs.ora...