skysight-inc/HackerNews huggingface dataset:
> Mathematics is essentially a system for "encapsulating internal complexity"

Not really; here's why:

An index is something that maps a small space into a big one so that you can move through the big one by traversing the small one. Example: The old card catalog is a tiny space through which you can move relatively quickly so that you don't have to explore parts of the library through which you can only move relatively slowly.

Mathematics is an indexing system for ideals (it maps ideals onto ideals). It's unreasonably effective for a couple of reasons:

* Some ideals correspond close enough to reality to be useful. So, mathematics indexes reality.

* Since mathematics indexes ideals, it can index itself. In other words, no matter how big mathematics gets, you can always shrink it again by using more math.

The purpose of encapsulation is to hide, but the purpose of indexing is to reveal. Mathematics does the opposite of encapsulation.

> In programming, the core abstraction mechanism is the function, which is essentially a device for "encapsulating internal complexity"

Abstraction is not about hiding complexity, abstraction is just naming things. I think what you really mean to say is that the core abstraction in programming is substitution: We give names to substitutions. (As a side note, it's an unfortunate misconception that software must have complexity which must then be hidden)

> Remove mutable state and OOP reduces to "partially applied functions" in the mathematical sense, i.e. zero original content.

Remove mutable state and de facto OOP reduces de jure OOP, which reduces to "networks of general purpose computers that get things done by sending and interpreting messages". We have at least one big existence proof that this works at scale.

But, even in the mathematical sense, OOP with immutability offers more than just partial function application; it yields families of algebras, and we're always inventing/discovering new varieties of those. On the other hand, if you use just a little bit of mutable state judiciously, you get a set of propositions that are falsifiable by experiment: In other words, you get science, which was one of the motives for inventing OOP.
Copy. I sat thinking about the title for a bit. I primarily wanted to point out that I did not miss the fact that it had been corrected--merely that it is a surprising vulnerability.
Doesn't seem to from my short reading, I'd not heard of it until now. Title insurance seems to be more for issues with the records about financial liens against properties that aren't properly recorded. It doesn't seem to cover this scenario and who knows if the author had it.
Context:
Washington, DC area Metro.
Van Ness-UDC is a subway stop for the University of the District of Columbia (UDC).
That one elephant died.

Although the elephant got a considerably larger dose (297 mg!!) than people would, and the experimenters handled the situation poorly.

http://www.theguardian.com/science/2004/feb/26/research.scie...
Yeah, as others have mentioned, it's not like the US has a stellar record of playing nicely with cyber security in the worldwide arena.

I'm sure most americans feel completely justified too "but we're the good guys, why shouldn't we be allowed to hack and backdoor everyone else?" but honestly, it's the same thing.

the difference is that we don't speak Chinese so we're not privy to their propaganda.
Almost everybody I know in the UK uses it, a lot.
Uber has a bit more than an app:

http://www.wsj.com/articles/is-uber-a-friend-or-foe-of-carne...
Let me rephrase that: you are exposing a way to trivially traverse the entire object graph you're exposing through the API, putting you at risk of DOSing your server when your friend Joe the frontend dev makes a small mistake in his query. You can obviously get the same result with REST, but usually you have to work a lot harder for it.
When you're counting every dollar, why would you want to pay a bank maintenance fees?
Ah, hadn't thought of that. I had a feeling there had to be more words, but couldn't come up with any off the top of my head. Apparently I write very little Norwegian in vim (I use jk for Esc).
It's incredibly easy to write buffer overruns in C that open up security holes.

Not that JVMs are immune, it's just harder.

That said, I far prefer writing in C/C++ to doing anything in Java.
The mortgage interest deduction is a ridiculous, market-distorting handout to higher income people. And I say this as someone who bought an absurdly expensive bay area house last year.

Tons of people in cheaper areas pay so little in interest and property taxes that they don't even itemize their deductions.

I don't know how it ever seemed like a good idea. If everyone can afford x% more housing cost, what happens? Housing costs get bid up by x%.
Actually, I don't mind redundancy. I meant to criticize the lack of logic and consistency. If it was logical and consistent, it should have been das Farhschein, das Fahrkarte and das Ticket :-)
There is an open secret you may not be aware of: every startup is a shitshow on the inside.
Came here to say "Don't put anything in your vimrc that you don't understand". Pleasantly surprised when I clicked the link!
That's a nice little part, but it has very limited memory: 32 kB on-chip flash, 4 kB RAM. That's less than some Atmel ATMega-based Arduinos. The Arduino Due (an ARM CPU) has 512 KB flash, 96KB RAM.

To get more memory, though, you have to go surface-mount.
...but the police is less likely to go through all your immaterial belongings for just a smell of weed.
I'd hope one of the first things for DB slow down is the running queries (eg. `show processlist` in flavors of MySQL) and seeing the number of rows examined. Maybe your DB doesn't have that, so you see hopefully see long running queries and they are mostly the same one, or you can see the same queries in your DB's engine status (eg. `show innodb status` in MySQL). If you don't have rows examined from earlier, you can run whatever equivalent you have of `explain` on these long running queries that are happening a lot, and now you should find the number of rows it is examining (and probably that it is running a scan query and not indexed).

I mean, you only get these scars from actually working with your DB and hopefully in development / capacity planning stages, so maybe that makes you a rockstar. Not to take anything away from the Stripe engineer(s).
I agree with you, but also: right now Facebook is effectively the main web browser for millions and millions of people. Even without Internet.org, those 50 websites are all a lot of people see. How can we change this model in a realistic, attractive, non-techno-utopian way?

(Also, in light of Internet.org, Instant Articles seem like a pretty democratic thing to do - bringing external content that would otherwise be blocked into this context.)
Check out spacemacs
My advise is to migrate to spacemacs
Many banks require a credit check to open a bank account without meeting a minimum balance... no way of getting credit in the first place if you're that poor.
Inclusivity is making sure no open source anywhere features a shortening of the word 'brother'. If people outside the US don't understand why that's offensive I guess they're bigots.

In all seriousness, this has to be the height of meddling for the sake of meddling.
The main reasons are probably regulation and effort/difficulty to serve.

Assuming you are a US citizen, I highly invite you to come over to Switzerland and try and open a (savings) account if you wish to experience it in person. I'm currently living here, and talking to my US colleagues, I've found that it is near impossible for them to open an account, even though they would bring money to the banks here.

Reasoning? Issues of the US with the Swiss banking system has made these customers more of a pain than a benefit. I'm sure a similar argument can be made for people who (perhaps accidentally) have a bad credit score
emacs-muse is also missing.
It's still free, no one is forced to use this. Companies exists to make a profit, if Facebook offers something for free of course it's not driven by philanthropy. I believe internet.org is better than no internet at all. Hopefully people in developing countries will be offered alternative in the near future but to get normal internet they need to earn enough to pay for it - internet.org is free with means people using it are the product.
It was inevitable that this would happen. I remember when Opera first added pop-up blocking and plenty of people got mad. This is the same thing: ads are burning energy, bandwidth, and our time.

Now that consumers have been subjected to piles of abusive ads, they're just blocking all of the ads regardless of how bad they are.
I'm another jk devotee, I use caps lock a lot more. I don't get the complaint about using other servers. Either you control them in which case :tabnew ~/.vimrc and adding imap jk <Esc> takes a few seconds, or you don't control them and so you just run the map command locally for your current file. My vimrc is around 200 lines but the jk bind is the only thing I must have these days. Enough forced Eclipse has beat it out of me, but I once had the habit of typing jk outside vim while thinking.
A Gentle Introduction to Ember 2.0 (Tutorial)
"Last Week Tonight" is a commentary news show that also happens to be funny. Its content is entirely factual and has way more in common with "60 Minutes" than with "Saturday Night Live". I'd argue that the purpose of the show is in fact to make you cry. Sometimes laughing makes that easier.
... but technically, weed is still a schedule 1 drug, so he is a criminal.
Questions & Feedback Welcome. Thanks!
Ah haha - it's an idea. I have two other Vorpal apps I'm making right now, and then after they're done that would be the next one I would make.
Show HN: Run, Bucket, Run – Source code as a game
It's a vicious circle: an index is missing, so requests take longer, so more DB queries run at the same time, the load on the DB server shoots through the roof.

And then it needs to rebuild an index on top of the already above-average load.
> C is categorically less secure than Java.

Well, to be fair, C is one of the least secure languages out there... Memory corruption, fairly weak typing, etc.
Ok. I was assuming the average tweet is < 144 chars, and that there would/could be compression applied.
In fact I would guess that the effective average information content in a tweet is very low :) (~10-20 bytes?)
My assertion is that you can't do that with a single realistic cycle precisely because there is a single one. Overfitting will occur, an ensemble of actors can't be gamed.
Yay. Solving the important problems of our lifetime...</sarcasm>
Qualcomm shows off a 24-core server chip
http://amzn.com/B0030V0PEW
That's great if you are privileged enough to pass as normal. Not acting Jewish was fine in 1937 Germany too, until that wasn't good enough and they started checking who your grandparents were.
My 0.02. The fallacy in the shady argument is you're justifying a bigger wrong with the much smaller one. It's like saying "if she didn't want to be raped she shouldn't have worn that short skirt" (i.e. blaming the victim).

It's guys like these, that although inadvertently, when they get snarled in asset forfeiture and choose to fight the system, they slowly induce change. And that matters. This is why states like Minnesota, New Mexico, and North Carolina, with Ohio on tap, are banning the practice before conviction.

(Disclaimer: I don't downvote either. I can't downvote right now anyway, but I think it detracts from the conversation.)
Yeah, the US is a big joke, and it sucks to have to suffer through the police state and looter healthcare system. Civil asset forfeiture is an insane rejection of our right to property. The problem is that "rights" are really more like "ideas which we must nod to and then can ignore fully" here.

Least we have startups, right?
It wasn't about privacy, it was just buying a truck. I never said it was about privacy. Hell, the DMV knew about the truck about 40 minutes after he bought it. The seller reported it as income[1]. This had nothing to do with privacy or fraud, and his bank wouldn't let him write checks for over $5,000 and he sure wasn't going to pay some fee for a certified check that the guy selling the truck wasn't going to take anyway.

We didn't see it as a risk. It was just a bit odd to have 150 $100 bills. Puts a little weight into the cost of what you're going to buy. Good thing he bought it too as his old truck (which I drove back, that's why he brought me not as some security) needed about $3,000 in repairs. He sold it to a farmer who did the repairs himself. My friend kept the truck for about 2 decades.

1) I remember his receipt pad. It was styled like something I imagine came out of a Dickens story. He basically bought wrecks and stuff in garages and restored some or built mods out of others. Pretty good retirement gig.
In addition to the usual issues that come up with identity documents, some banks want documentation of an address of residence (e.g. a utility bill in the customer's name), which a lot of people don't have for various reasons.
This seems unnecessarily harsh. As you said, XSS is one of the most common vulnerabilities out there - in other words it's a very easy and common mistake to make. I wish we lived in a world where writing an XSS vulnerability was inexcusable incompetence, but the actual world we live in is one where even the best will slip up sometimes and we have to depend on audits, patching and defense in depth. (Which is exactly what happened here; a security researcher audited it, found the problem, and it was promptly patched.)
I tripped with a few buddies I haven't seen in years. I'm happily tripping and my friend tries getting all deep on me. When I didn't engage his silly questions, he felt I wasn't on his level and that he really did have all the answers. It was hilarious and sad at the same time.
What's so striking about this is that entire retail chains can be shut down by a problem in some cloud server. Starbucks had a server outage in April which caused stores to close.[1]

There's a trend towards "hosted POS", where point of sale systems have to talk to the "cloud" to do anything, even handle cash. Until recently, most POS systems were running off a server in the manager's office, which communicated to servers and credit card systems elsewhere. A network outage didn't affect cash transactions. Often, the systems could even process a credit card transaction without external help, giving up real-time validation but still logging the transaction for later processing.

There's a single point of failure being designed into retail here.

[1] http://www.usatoday.com/story/tech/2015/04/24/starbucks-poin...
Wow, message received HN. Don't make fun of Devops! It doesn't seem that long ago that it was hailed as the silver bullet that eliminates the "throw it over the wall" mentality that causes issues exactly like this one.

This issue was caused by a failure in communication between team members. That communication is just as important as good engineering.
Facebook might be monopolistic in some contexts because that’s what people want to use but the issue with inter​net​.org is that communications networks are licensing public spectrum and then cutting deals for preferential access to certain websites. Regulators and the public have a direct interest in figuring out whether these sorts of schemes are acceptable.
This is strong medicine, but the reports around ayahuasca, ibogaine, psilocybin, DMT and peyote all indicate the possibility of deep and lasting positive psychological shifts. I'd personally submit to treatment in the safety of a psych/medical clinic rather than a secret Peruvian yoga retreat but the fact that so many centers are popping up indicates some kind of global hive-mind desire for change. I'm supremely interested in the official and unofficial studies taking place all over the world right now in these domains.
I fully agree. I think it seems like this key that people think is special like caps lock. The symmetry afforded by the space key and every other key on the keyboard is phenomenal.
> It surprises me that an engineering group that is obviously so clever and competent would come up with a process that lost track of the required execution order of two pieces of DDL.

To me it seemed that it was a bug in the tooling that split the index change into two separate change requests. I'm sure a change request supports more than one piece of DDL, and it must have worked in the normal case, otherwise they would have run into this problem much earlier. So it was likely some weird corner case.

Now that I think about it, this could happen to us as well. We have peer review for each database change, but only at the source level (so, definition of the schema); the actual commands for schema changes are usually generated automatically. If some bug in that step existed that was only triggered in weird corner cases, we'd be screwed.

A backup of our main database takes about 7 hours to restore, and then we'd have to reply the binlogs from the time of the last snapshot up to the failed schema changes, so I guess we'd lose about a solid work day if things went down south. Yikes.
Do they have 20% time?
It is a double problem. A rule that allows the police to seize your cash for the most flimsy of reasons only works if people are not aware of the fact that this could happen. Therefore, the next step is to outlaw discussions of the type that we are having now. Next, hosting a site that allows this kind of discussions must also be banned. Merely describing what exactly is banned, discloses the wrong kind of information, and must therefore also be banned. It is not enough to impose obnoxious rules. It will also be needed to control all information about them. The solution is to make rules a secret. That is how you get things like the FISA courts, the secret courts granting the NSA the right to do whatever they like, while anybody involved becomes subject to a gag order. Shut up, or else!
Conway's Game of Life in One Line of APL (2007)
Of course it's morally right--the people who are doing best in society have the highest obligation to society, just like the strongest and most capable in a family should be the one bringing in the bread. We even instinctively recoil when we see the deadbeat who won't work, forcing their children/siblings/whatever to support them.

We even used to have a common phrase for it, noblesse oblige, though that's fallen out of favor in the last generation.
250,000 people protest against TTIP in Berlin
The Cello Music of the Spheres: Mathematical Beauty and Symmetry
Please don't blame the victim. Would you like me to steal your car just because I can force it away from you?
Four Reasons Why Sports Startups Are Scoring Big
That's a pretty good summary. It can be pretty tough to analyse permissions across a big Java application though, which is harder than analysing a small C programme that does some kind of math simulation or something. So I can see the real world application of this paradigm.
Indeed, what is the point? If they have some separation of concerns between dev and ops then it also makes sense to give ops some separate rights and responsibilities, such as vetting a change like this by analyzing the resulting query plans from a sample of production database queries. I'm sure something like that will be in their internal postmortem action items under "prevention".
Perhaps it's an idealistic view where "content pays for infrastructure", which on the surface appears like a Comcast move and against the grain of net neutrality.
> But the difficulty of writing secure software is not about avoiding any one particular mistake; it's the sheer number of mistakes available to be made, so that it's easy for one mistake to slip through the cracks.

This may be pedantic.. but writing secure software as an individual is not that hard; writing secure software as a team and then publishing that as a product is almost impossible.
But it wasn't a private criminal theft. The only person who stole the money was hr police. No police, no problem.
And you can write the Game of Life[1] in one line of APL.[2]

Lines of code is not a great metric of software quality.

[1] - https://en.wikipedia.org/wiki/Conway%27s_Game_of_Life

[2] - http://catpad.net/michael/apl/
Why is it foolish? I'm not real fond of being called a fool. I've had more problem with credit card fraud (and the lost money in fees because of it even if the original money was restored) then I ever had carrying cash. I don't honestly get this "you could be mugged" thinking. If mugging happens often enough that its a risk factor in carrying cash, then you need to think about where you are living.
There are different levels at which you can operate a database.

One is to keep it running, monitor disc space, response times etc. but otherwise leave the schema to the developers.

Or you can own the schema, discuss all the changes and migrations with the developers etc.

If it was the first kind of DB operation (which wouldn't surprise me, because that's what our $work has as well), it's not surprising that they trust the developers to provide sane DDL patches.
Let's be both blunt and frank: You really don't have any choice but to do as he asks or leave. Trying to play games to get him to leave could end up getting you fired. You might also want to look at your weaknesses and see if there is anything which could be addressed.

What's wrong with looking for a better gig?
Show HN: All Y Combinator Q&As at one place
Hi, I work in infrastructure at Stripe and I'm happy to provide more insight. Several threads here have commented on our tooling and processes around index changes. I can give a bit more detail about how that works.

We have a library that allows us to describe expected schemas and expected indexes in application code. When application developers add or remove expected indexes in application code, an automated task turns these into alerts to database operators to run pre-defined tools that handle index operations.

In this situation, an application developer didn't add a new index description or remove an index description, but rather modified an existing index description. Our automated tooling erroneously handled this particular change and interpreted it not as a single intention but instead encoded it as two separate operations (an addition and a removal).

Developers describe indices directly in the relevant application/model code to ensure we always have the right indices available -- and in part to help avoid situations like this. In addition, the tooling for adding and removing indexes in production is restricted to a smaller set of people, both for security and to provide an additional layer of review (also to help prevent situations like this). Unfortunately, because of the bug above, the intent was not accurately communicated. The operator saw two operations, not obviously linked to each other, among several other alerts, and, well, the result followed.

There are some pretty obvious areas for tooling and process improvements here. We've been investigating them over the last few days. For non-urgent remediations, we have a custom of waiting at least a week after an incident before conducting a full postmortem and determining remediations. This gives us time to cool down after an incident and think clearly about our remediations for the long-term. We'll be having these in-depth discussions, and making decisions about the future of our tooling and processes, over the next week.
Though I understand your reasoning as to why you call devops etc fraud, these developers are under a huge amount of pressure from the business side of things to "just make it work TM".