skysight-inc/HackerNews huggingface dataset:
I think we can go further :

- every non-trivial software is a compiler

- every non-trivial software is a database

Every non trivial software have to read/parse/manipulate/store a lot of data. I think it ultimately permit to simplify thinks to just admit that we are doing a specialized database/compiler. The fact that input data are coming from file, database, network, command line or the code itself and are going to files, database or network is just an implementation detail.
The statement itself is basically 98% false. I've been a Coverity user since very early days, and have used a few other static-analysis tools as well. Every such tool that I've seen runs multiple separate kinds of checks. Yes, the false positive rate for some of those checks can be alarmingly/annoyingly high. OTOH, any software developer with half a brain can see that other checks are much more accurate. Some are darn near impossible to fool. If you focus on those, you can find and fix a whole bunch of real bugs without too much distraction from false positives.

Her statement gains 1% truth because Oracle might already have picked the low-hanging fruit, and any more reports they get really are full of chaff. I find this unlikely, but it's possible. She gets another 1% for this.

> A customer can’t analyze the code to see whether there is a control that prevents the attack

That's actually a pretty decent point. Anyone who has actually studied static-analysis reports for any length of time has probably encountered this phenomenon. For example, you might find a potential buffer overflow that's real in the context of the code you analyzed, but the index involved can't actually be produced because of other code that you didn't. Or maybe a certain combination of conditions is impossible for reasons related to a mathematical property that has been thoroughly vetted but that the analysis software couldn't reasonably be expected to "know" about. Ironically, these kinds of "reasonable false positives" tend to show up more in good programmers' code, because they're diligent about adding defensive code handling every condition - including conditions that aren't (currently) possible. In any case, while it's a good point, it's applicable rarely enough that it doesn't really support the author's broader position.
This is surprising for me because access to a specific online business is not typically on a list of requirements to relocate, for me anyway.

Is there an online business, equivalent to Amazon, that is killing it in Canada?
XMPP Myths
> only US English speakers will be allowed to disable this requirement
You can install any non-English locale (language-pack) on top of Firefox. I do that (because I want to be able to switch from a language to another). So it is a two-steps installation.
This is sort of how I feel after moving from over a year of pure Clojure(script) development, to working with Python again. Its not that you can't write beautiful code in Python, its just that the language encourages a certain style.
Working in academia, I've experienced this too. I've read work in my field of research that I dismissed as bad work or not worthwhile, simply because I didn't fully understand them. Too complicated, strange background assumptions, not well motivated, etcetera.

Then later, while developing my own work, I find that I end up with the same complications, that I'm forced to make the same background assumptions, and I have the same difficulty in motivating my choices.
Uhm...the URL in that comment and the URL of the story are the same. Did your "save changes" button betray you?
I think this is short-sighted. Everyone who operates with any portion of their stack on any cloud provider is "operating at Google's scale" since even a small service is affected both by the infrastructure on which it is run and all of the other services run on that infrastructure. If you're running in a cloud, you need to plan and develop like you're a product team at facebook or google, and cloud providers need to act like they are providing infrastructure for a cohesive system, not a bunch of individual pieces.
I think it is worthwhile to point out one specific section, which this web 2.0 has certainly intensified --
"If you want this woman to retain her fear for life, you should help her avoid elevators.

But if you want to help her return to normalcy, you should take your cues from Ivan Pavlov and guide her through a process known as exposure therapy."

Which applied online might mean that dissenting opinions and implementations are important and not to be shied away from.
KDE Releases Plasma 5.4 Beta
Best practices for building large React applications
Thanks for the info.

I don't see how it addresses any of my concerns, especially in light of the following things:

* Most Android phones are no longer officially maintained after three years. Many are abandoned much earlier.

* In order to get a GPU manufacturer to design and build a new driver, they must have some incentive to do so. For the not-leading-edge parts that I call out in my comment (and that make up the vast bulk of the SoCs in the field today), how do you create incentive for the GPU vendor to spend the time on these older parts? Money? Contracts?

Perhaps I'm missing something in your analysis, though.
Agreed. The author is clearly wrong on a bunch of fronts; I don't think anyone here would argue otherwise.

I just don't understand the hatred directed towards someone who's writing without the usual corporate brain-mouth filter ...
Epic fail. Mozilla should be making the browser subsystems more secure, not saying 'Trust us, we'll ensure your add-ons are secure'.

Will the add-ons source code be reviewed by a CISSP skilled in the languages used within the add-on? Will the add-on be tested with the top 1000 add-on combinations out there? If the add-on provides an API, will it be tested using fuzzing? The list of these questions, and the others to which your answer is likely 'no', goes on. If you are not doing these things then you are providing a false sense of security. You may catch the bottom 60-80% of malware and unstable add-ons, but the most dangerous 20% will likely slip through, in my opinion.

This does not make sense from a UX perspective, as MANY others here have pointed out, so I won't go into that further. I will point out that it doesn't make sense from a business perspective either. If you are saying your add-on signing program improves security, and you let an add-on through that has malware, then you might be sued (I am not a lawyer, this does not constitute legal advice, etc.).

So to recap and summarize, with brevity, and with accuracy...

EPIC FAIL
Show HN: Node.js / JavaScript full stack performance monitoring SaaS
Stanford was taken to the cleaners to the tune of $1.5 x 10^8 USD in the deployment of Oracle Financials and related products via endless "consultant implementation" charges that didn't really deliver much value, were rarely on schedule or on budget. Oracle's enterprise calendaring program was totally inadequate and had UX that made most point-of-sale systems look effortless by contrast. Also, the assets managing app, Sunflower, was another dud. The only thing Oracle Database had going for it was no crippling license activation (license scofflaws are/were sued or fined into oblivion worse than M$FT), which one could say was equivalent to MS SQL. Unlike MS MSQL, Oracle DBMS has/had bazillions of support patches to apply to run a real production box, analogous to the previously separate Sun's Solaris patchsets.

Btw: For smaller enterprisey shops, either MS SQL or Postgres are the way to go. Often multiple similar components are needed because different apps have firm requirements that only support one or another; but generally try to avoid this because supporting too many heterogenous components is expensive (laborious)... hence the prevalence of local "standards." Deploying everything with cfengine3 or puppet can help reduce the manualness and nudge vendors into repeatable, idempotent deployments rather than clicking on inane GUI installers like an animal.

ProTip: Don't let consultants "provide" oversight / free-reign for their own projects, budgets, etc., that's like the wolf guarding the henhouse. The client must hire their own project managers, have clear accountability/authority paths to their management and know exactly what they need (avoid endless upselling). Or lots of money will be transferred from idiots to crooks (enterprise caveat emptor).

Edit: fixed grammar
Mary Ann Davidson's testimony on "cybersecurity" (2009) https://www.whitehouse.gov/files/documents/cyber/Congress%20...
The light elements that you prefer for fusion, have a lower absortion rate for neutrons than the heavier elements, which you don't prefer to absorb neutrons. In other words, to get usable fusion, you need so much neutrons that a lot of material in/out of the reactor will get too radioactive.
Exploring Google Eddystone with the Proximity Beacon API
Unfortunately the key to this design is you have to force air through it constantly. The weight of the inner part is pushing a miniscule amount of air through the gap constantly, but you need a pump for extended operation. Still, its possible, if you're willing to put down a few grand for it.

It still works without forced air, just not nearly as well. You really need to force the fluid to get the high carrying capacity, or use a higher viscosity fluid so it doesn't get displaced as easily, which is actually how standard ball bearings work. A moving ball bearing has no contact between any metal parts.
>Ah, well, we find 87% of security vulnerabilities ourselves, security researchers find about 3% and the rest are found by customers.

They admit more security vulnerabilities are found by customers than security researchers and still they release this smug "fuck off" toned blog.
Who the hell wants Pennsylvania.
Fund the Alabama State Government
Last time I was in the Bay area, I took cabs. Oh what horrible experiences!! I finally took the plunge and used Uber. I was very satisfied until I encountered "surge pricing" when going to the airport at 5am. I'm still a fan but am a bit mixed about relying on it.

For long distance trips from the airport (hour long), I still think Uber is pricey. On my last trip from an airport, a black car would have costed 120-150, with a driver in a suit or an Uber (90ish). Since surge pricing is not predictable (by me), I would go for the black car option since it is certain.

The whole discussion makes me realize there are multiple markets for cabs. Uber definitely rocks the "hail a random cab for an impromptu ride" market. The "planned trip to the airport, etc." is a different market that has yet to be cracked.
Which One Is Better for You? Townhouses or Houses
Notes from Swift Learnings
"Standard" hedge fund compensation is 2-and-20 (2% of funds under management and 20% of gains), so a $2B fund would yield $40M in the 2% management fee. That's the "keep the lights on money".
Shoot me an email at shane@libramatic.con
I use several small add-ons I wrote myself. Why should I have to get Mozilla's approval before I can install my own damn add-ons? One of them executes processes and I'm 99% sure it'll fail the automated review.

EDIT: It passed the automated review, but my point stands. If I wrote the code, then you can be damn sure I trust it.
What?

I'm fairly positive this has nothing to do with oppression except in a wildly politicized worldview where somehow lower socioeconomic areas were actually prohibited access to the reporting functionality. As far as I'm aware this wasn't the case, it was a completely unintended side effect of a good idea: we can save money on pothole patrols by letting people report potholes and then fix them in a queue-like order from when they were reported thus lowering costs and improving response time...

And here they are trying to make city planning decisions with something that I think will probably suffer the same bias. It's not an intentional classist plan, it's just not fully thought out (although I don't know this, maybe if I read the paper they will talk about controlling for this effect).

And I don't see anything in your solution that would solve anything, you seem to have just thrown a ton of hotwords into a grammatical structure...
And in practise, most of the "students, musicians and architects-working-at-cafe-and-having-too-much-free-time"
will turn into the "doctors & architects-with-jobs-and-kids", so it's really the ageing process that drives this process. Later the "doctors & architects-with-jobs-and-kids" will turn into pensioners, and when they move on to the next world, the cycle restarts. So it's not some kind of nefarious scheme that 'drives out' the allegedly more creative people, but rather communities evolve around ageing and family creating.
> Developers have been asking for Vulkan for years.

I would wager that a very large slice of the folks doing graphics programming are largely incapable of writing a new high-performance graphics card driver.

Is there demand? Sure. Does anyone want to exert the effort required to meet that demand? I don't know.

Once upon a time, the CPU manufacturers were demanding a CPU that was easier for them to design, but just as performant. This lead to the Itanium, which had a simple hardware design but required very complex compilers for optimal performance. Thing is, noone wanted to expend the effort required to make a sufficiently clever compiler in order to get the best perf possible out of the CPU.

Anyway, if you can deliver more than platitudes, I'm all ears. I'm pretty ignorant on the topic and would love more information. :)
The Evergreen Web
And it would break at any corporation that does a MITM on their own employees to monitor SSL traffic.
Now every school book which have "abc" as hypothetical company name should be changed.
I don't understand why everyone thinks this is a bad idea, it is great - run the profitable business as a separate business, use the profits to invest in fun things and also promote people to CEO instead of watching them go CEO somewhere else (yahoo etc).

It is a win win for everyone.
Form for Drug Dealers to Snitch on Competitors Results in an Arrest
I don't take or maintain notes based on what comes across HN. I suppose that little bits might occasionally leak into my journal from time to time but not deliberately nor often.

Usually, I use search to find past HN threads. I occasionally book mark a link. Usually I come back and read it within a couple of days or a week. Then I'll delete the link. There's just too much.
> Eg. what's the edit distance between these two strings?
>
> AAAA BBBB
>
> Traditionally, it would be 4, but it's unclear if you
> allow only inserts and deletions.

It is >= 8, since you surely have to remove 4 As and insert 4 Bs. Since these 8 transformations indeed transform AAAA into BBBB, it is exactly 8.

It is very easy to generalize the Wagner-Fisher algorithm (https://en.wikipedia.org/wiki/Wagner%E2%80%93Fischer_algorit...) to this "simpler" variant of edit distance, but this algorithm will still have a (worst-case) runtime of O(m*n), where m, n are the lengths of the two strings.

Of course, the question remains: Is there a (worst-case) faster algorithm?
I like the fact that a security issue is being tackled. What I absolutely hate is the fact that there are no ways to turn this option off.

Just like HSTS I can't turn this off and it leaves a bad taste in my mouth. Were originally I considered firebox to be a browser for power users, now I'm not too sure any more.
The tone obfuscates the message. I don't think it's hatred so much as bewilderment that someone in an executive position at a huge tech company would present an argument about customer behavior this way.
Time to De-Confederatize the Textbook
The key takeaway for algorithms research seems to be that "[w]e don’t know how to build big networks that deliver lots of bandwidth". This is exactly what S. Borkar argued in his IPDPS'13 keynote [1]. An exa-scale cluster can't be cost-efficient unless the bisection bandwidth is highly sublinearly in the cluster's computing power.

We need new algorithms that
- require communication volume and latency significantly sublinear in the local input size (ideally polylogarithmic)
- don't depend on randomly distributed input data (most older work does)

It's really too bad that many in the theoretical computer science community think that distributed algorithms were solved in the 90s. They weren't.

[1] http://www.ipdps.org/ipdps2013/SBorkar_IPDPS_May_2013.pdf
Mozilla's hypocrisy is astounding:

https://blog.mozilla.org/security/2013/01/29/putting-users-i...

"Users should have the choice of what software and plugins run on their machine."

https://blog.mozilla.org/theden/2014/12/15/introducing-a-sma...

"Firefox is dedicated to putting users in control of their online experience"

More recently:

https://blog.mozilla.org/blog/2015/06/02/firefox-puts-you-in...

"Firefox Puts You in Control of Your Online Life".

The slogan, as found on https://www.mozilla.org/en-US/firefox/new/ , is now "Firefox is created by a global non-profit dedicated to putting individuals in control online." I believe it used to be "users" - see above - but was silently changed. I suppose these "individuals" are the people at Mozilla...?
Yea, different VM messages and screening settings for different numbers or callers.
I've been using it to filter calls on an overseas number that reaches me only at certain times of the day.
Link is giving me a 404. Anyone got a mirror?
>We will also not provide credit in any advisories we might issue. You can’t really expect us to say “thank you for breaking the license agreement.”

Well, Apple does (for jailbreak exploits).

>I am not dissing bug bounties, just noting that on a strictly economic basis, why would I throw a lot of money at 3% of the problem

Uh ... You don't think that percentage will increase if you offer bounties?
It certainly should cost less

Not really; like FranOntanaya pointed out, most of these buildings are just four crumbling stone walls and a roof (with luck). And it doesn't help that Galicia is very humid. It'd be much cheaper to tear them down and build a new house on the same land. And much cheaper still, of course, is making large apartment buildings.

Besides, it's not clear that those immigrants would actually stay there. Like the people who left, they probably also want jobs and access to stuff (cheap grocery stores, entertainment, etc). These villages are in the middle of nowhere, often connected by narrow and curvy roads that surround the mountains.

EDIT: Also, one of the reasons why they're abandoned, is because many of the houses / terrains are more than 100 years old, the property now belongs to dozens of grandchildren and greatgrandchildren, and it's a pain to get them all to sign off to the sale.

For example, my greatgrandparent's land has been passed to their 13 sons and daughters, each of whom have had 2-4 kids of their own, etc. I think my mother owns about ~1/26 of the property.
I live in Europe and for the last 15 years taxis prefer to be hailed via phone/sms rather than hailed on the street. If you hail a cab on the street you will get a higher rate plus a hailing fee.
Cabs near airport/railway station that are parked there are a tourist trap since they charge almost triple price plus drive you a longer route. Basically a taxi company strikes a deal with city council so only their cabs are allowed to park there and then make their "hail from the street" rate as high as local laws will allow.
The diversification seems to be going in the way of the conglomerate - and conglomerate tax shall apply - whether it is Google or not! Hope it does not turn dystopian though.
I've recently read "The Difference Between God and Larry Ellison *God Doesn't Think He's Larry Ellison" and while it was published over 10 years ago, this sounds exactly like a lot of things that happened in the book. The Oracle corporate culture seems to basically be reflection of Larry Ellison's megalomania. Their will to rack sales is just insatiable.
Oracle's CSO thinks the company doesn't need security help
Perhaps not related but I remember LHC's raw data rate is about PB/s and they use ASIC hardwares to filter it.

https://i.imgur.com/4IaNr5a.png
https://web.archive.org/web/20150811052336/https://blogs.ora...
archive.org has a lot of the older blogposts (https://web.archive.org/web/*/https://blogs.oracle.com/marya...) and sufficiently many are old and in a similar tone that this appears to be authentic. E.g.:

https://web.archive.org/web/20140313161522/https://blogs.ora...
Symantec to sell Veritas to Carlyle
Seems like the original blog post was deleted, here is the archive - https://web.archive.org/web/20150811052336/https://blogs.ora...
Indeed, it does tend to end badly, and the best example is a company that ended up being bought by Oracle. The arrogant tone of this post reminds me very much of the flurry of blog posts that came out when ZFS and DTrace were first introduced. Remember "The Last Word in File Systems"? That kind of arrogance, complacency, and impatience with interlocutors is mildly annoying to developers elsewhere. It's more than annoying to customers, and to sales people who feel unsafe pushing products whose developers continually undermine them. That's why Sun is no more. Oracle might want to consider that before they start relying on this kind of astroturf to convince anyone of anything.
This was recently discussed on the django mailing list as well and resulted in them putting a quick mention about it in the docs:

https://groups.google.com/d/msg/django-developers/IkRgMxTTzP...

I think the performance gained varies quite a bit. I gave it a quick try and saw very minimal gains locally... still need to look into it some more.
ENTERTAINMENT and INFORMATION = FOUNCH
An Advanced Wikipedia where we are bringing together Information and entertainment together.
www.founch.com
30 years is not long enough.

Literacy took much longer, but the benefits are clear today.
It's one anon's opinion based on their observation and may not be reflective of a larger reality.
Big disc sander – drawing industrial machines
Hong Kong Police arrest Uber drivers, raid offices
I read the blog, but now it's returning a 404? Did they take it down?

If so, then somebody at Oracle realized that post reflected poorly on their organization. Perhaps there is some hope for Oracle yet.
> Because her text will probably only infuriate people that will arguably never be Oracle customers?

As a sysadmin with customers who run oracle, and who put some stock in what I say, I can say I am more likely to warn people away from oracle in the future. While in some companies, tech purchasing decisions are made by suits with little or no input from techies, that's not universal.
^ This.
Sunar Pichair Designated as New CEO of Google
http://firespotting.com/
I'm extremely pro-peace, but in total war elimination of civilians is necessary to reduce production capacity.
Mozilla have been doing odd things in recent years, almost like they are transitioning into an authoritarian movement. Want to use unsanctioned extensions? No, go away. Want to use non-secure HTTP? Sure, but we will take away your features. Want to work for them but have unapproved views? Fired. All this is from viewing them as an outsider, so you never know, but something is different.
Glorious. Somewhat surprised it was taken down, though.