skysight-inc/HackerNews huggingface dataset:
> Syntax is not really an issue for any programmer with a reasonable amount of experience.

> They're a perfect use case for functional programming, there's not a lot of complex state ideally,
> and yet even simple simulations are notoriously fraught with unexpected behavior. See: thousands
> of YouTube videos of physics glitches in games.

I'm not sure I'm following. Are you arguing that because physics engines are a perfect use case for functional programming, that they are implemented as pure functions? I don't know of any physics engines that are implemented this way, hence the buggyness.

If an implementations of 3D scene rasterization contains glitches, the language used is most definitely the issue, because producing glitch-free 3D animations is a solved problem. No programmer writes a physics engine to produce glitches, so if they magically appear, even though they aren't visible in the spec, the spec language is faulty.

I guess I'm arguing that the problem is that most popular languages allow you to write programs/specs that are invalid (will crash when executed). So we're writing specifications in languages where we can't even say whether the specification is valid or not (actually implementable). If humans produce buggy programs, that is proof that we're using the wrong tool, I'm arguing, because no one intends to produce bugs.

Haskell is a bit scary, at least it was for me in the beginning, because it can seem so hard just to get your program to compile. But that's because the compiler actually verifies that your program is valid - that no unhandled exception will occur. If people are having writing valid, purely functional programs, perhaps this is, in part, because their idea is unimplementable, and Haskell is telling them this via not being able to compile your spec, while other languages inform you of this via an unhandled exception that crops up a year later, after the code is in production.
It's certainly enforceable by banning.
Show HN: Bookcelerator ranks books by compiling upvotes, reviews etc.
That's what freedom of speech is. It specifically has to do with the government.

No, it damn well is not.

Freedom of speech is the principle, the first amendment is the law. The law protects a principle our society has deemed important. The principle exists with or without a government.
It's the first thing I do everytime I set up FF on a new computer: Select Dejavu Sans as the standard font, and uncheck the box "Allow sites to chose their own fonts".

For extra bonus I set the "minimum allowed font size" to somthing where I don't have to squint.
21% of women sending a message first seems surprising. I only skimmed the paper, but it doesn't seem like they removed bots from their data. Back when I was single, the vast majority of women messaging first were bots.
"In 2011, Yelp had more than a million lines of code in a single monolithic repo"

Did I read that correctly, the Yelp product is a MILLION lines of code?

For comparison, the Doom 3 source code has 601,000.
Some LED bulb manufacturers are now using code to force owners to use only original-branded consumables, to prevent owners from getting service from third parties, and to limit features to those that benefit the manufacturer, at the owner's expense. Example: http://boingboing.net/2015/12/14/philips-pushes-lightbulb-fi...

These LED bulbs are not really owned; they are "licensed."
>Hell, I've hosted most of my personal domains' email accounts via Google. A few months ago one of them was deleted. I never really used the email, but I certainly had things on their I would like to have for posterity.

That's what you get for not making backups. This isn't rocket science. You're using someone else's free service, and they have zero obligation to continue to provide that service to you. Even if they didn't intentionally delete your account, mistakes do happen sometimes. Who actually thinks it's a good idea to keep only one copy of data that you value? Especially on a site with the name "Hacker News"? Do hackers these days not understand backups?
I guess I'm the outlier then... :/
The Church of the Flying Spaghetti Monster was founded in 2005. https://en.wikipedia.org/wiki/Flying_Spaghetti_Monster
How Your Business Can Profit from Pokemon Go
I can't agree more, There is no reason that editing text files would need a full web browser which is buggy and slow. Many of these javascript apps which are replacing native apps use 500mb of ram, at some point you will have 5-10 of these things churning memory and consuming battery life and cpu cycles. (Note Atom, HyperTerm, Chrome, Slack, and Kitematic is already 5 browser apps)
We currently store tags in a separate region of physical memory, though you could imagine "borrowing" ECC bits. A tag cache (which due to the small size of tags can have a large reach) reduces the number of instances where you might have read or write multiplication. We're about to start work on further optimisations on this.
Here is a free video course on GDB - covers most of things discussed in this video and more:

http://www.pentesteracademy.com/course?id=4
You mean like this?

https://www.visualstudio.com/en-us/features/python-vs.aspx
Though USB 3.0 works by adding new wires, and there is no reason to remove the filtering on the wires/pins that carry 2.0
Hosting your email with an established provider is easy, set up SPF records and the existing IP reputation of your provider will get you past spam filters quite easily.

Where you run into problems is when you do what I just did, I was using Google Apps, then Outlook.com with a custom domain and decided I was tired of giving other people access to my data - since I have a decent business-class cable connection at home including a static IP I bought a couple GroupWise licenses for myself, my wife and my daughter and moved our email in-home where all our data sits comfortably on my FreeNAS storage array. Since I rarely send email, and my home IP is 'unknown' to any IP reputation services at the moment getting past spam filters will require some time. It's a non-issue for me, it's a personal email account and I can tell my friends and family to check their spam folders the first time I contact them to whitelist my address, but it's not something everyone wants to deal with.
Yeah, this is definitely the case. I swipe right on everyone. It's an extreme rarity to find a woman who texts first. I'd put it at easily less than 5% (if they aren't a bot).
It might be, but so was google. In addition, some of the greatest software is nothing more than bundling the right components together that existed before. Microsoft Office is not exactly unique, emacs can do that and was available well before it (emacs can do everything!). Wordpress is not really innovative, it's just a collection of things others already had, yet it is huge now. Point is, Emacs is missing to much to equal cloud9 right now. It might all be somewhere, but it isn't readily available in a form users of cloud9 would like.

So reinventing the wheel? If you refer to some magical emacs setup living somewhere on a fictional users local machine which is being cloned and made very real and available to the world. Yes they are reinventing the wheel. If it's easy, please make the fictional emacs become real and share it with us in a shown HN. I think there is a difference between a hacky approach that works and a product.
I've also used it for the past months (latest version at MELPA), and haven't had any problems. Much preferable to the jupyter browser interface, no browser keybindings etc. web page stuff getting in the way.
It is fascinating to imagine lightbulb manufacturers deliberately handicapping the durability of their products. Surely this flies in the face of fair competition... Still, I'm confused about the counter-proposals mentioned.

What does the article mean when it says that there isn't a viable business model for durable products like LED lights? Surely, demand could be supported by a short-term boom in supply followed by a much smaller maintenance-level manufacturing effort? Why can't we be satisfied with this outcome, rather than trying to engineer for people to pay taxes or extra cost like Cooper suggests?
there are some situations where execution of the rest of the program up to that point takes forever, and you don't want to have to spend however many hours/days/weeks reexecuting just for a typo. scientific computing comes to mind, with its huge simulations
I agree and disagree: Agree that it is frustrating to see people who don't have to same calling and passion, who see programming and software as just a 9-5, in some ways, but I disagree that is necessarily evil or toxic. Many people come to computing from other fields, just wanting to get stuff done, scripting, etc. They don't necessarily share the passion some of us posess, but that's true in any job. The problem is that people in power decided to frown upon those people, instead of teaching them, forcing them to relive 50 years of programming history to get the knowledge they need: it wasn't until the left-pad incident that I understood the cost of dependancies, and the importance of vetting them, and avoiding them of possible. Nobody made it clear, because they were too busy glaring down at newbs, and bikeshedding about js as a language (newsflash: it's here, we're stuck with it, it's not as bad as you think, you can write good code in it, so just thank Jesus f@$%# Christ that you're stuck with it, and not something like QuakeC. God).

Frankly, nerd and hacker culture is growing the same as always, it's just that programming isn't exclusive to us anymore. We haven't gotten smaller, the playground's gotten bigger. So for god's sake show some of the smaller kids how the zipline works before they fall off and break their arm.
I would be very grateful - a new (old?) way of thinking about computing is very interesting to me.
US Propaganda Failure on why they're arming terrorists
The US won't designate terrorist groups in Iraq and Syria as "terrorist" groups because the UN hasn't designated them as terrorists.

The UN hasn't designated them as terrorists because the US keeps vetoing it.

Result: America gets to keep arming those "moderate" rebels.

‪#‎USPressBriefing‬
If the theory is right, then German, Swiss or Singaporean restaurants should be at the top of the list
Would be more interesting to see additional history outside of the last 5 years.
I'm attempting to say that the user is given no freedom to choose when and if to install updates. MS keeps on releasing broken updates which render thousands of PCs broken. If you're OK with that then I'm fine.

Secondly, it's a myth that Windows must be updated to stay secure. It's such a huge myth it's actually cringe worthy. If you're at home windows updates are needed only to keep your IE/Edge installation secure. That's all. All incoming network ports are blocked on your router by default.

And if you're stupid enough to rely on MS Security Essentials then I will stop arguing with you. That's not an AV - that's a huge hole.

Unrequired updates are rarely good.

> Sorry but the whole article stinks of anti-MS FUD and anyone who attempts to argue against keeping (or features that keep) their PC up to date is ignorant at best.

You took just one item on the list to attack without even giving valid sound arguments and now you say the whole article is anti MS FUD.

With that I bid farewell to you. You have yet to become a decent debator.

P.S. The truth is Windows has had some remote vulnerabilities in regard to fonts rendering and such but they are very difficult to exploit (and I haven't heard of any circulating in the wild exploits).

Again in 99% of cases users get infected by downloading shady files from the net or opening unrequested e-mail attachments. Windows updates will NEVER save you from that.
Hey, I have a few issues with your attitude.

Firstly, if there is one piece of software that I want to be fast, lightweight, and most importantly secure, it's my terminal emulator. The hard part isn't drawing characters to the screen (which is what HTML and CSS would help with), it's the VT100 parsing and logic, which can be written in...well, anything, really.

I would first like to point out that the HyperTerm OSX zip is 43mb, and the unzipped HyperTerm.app is 123mb.

Supporting exactly one OS: again, the OS specific bits aren't the hard part. Blitting characters to the screen is easy, and platform independence certainly isn't worth 123mb of overhead.

250k+ Node modules: The number of packages in a package repository is a poor metric for determining anything except the number of packages in the package repository. npm has tons of redundant or ill-maintained packages, and that's even before we discuss whether having a bunch of available packages makes a terminal better at all. In my opinion, it doesn't, and this circles back around to the fact that a terminal needs to be secure. I sure as hell don't want random unaudited code running in the same application that I use to administer systems.

Standardised plugins: what standardised plugins? npm modules? Not sure what you mean here.

Can't open web pages locally: Why should a terminal do that? As a party trick? I don't want to stand in the way of improvement, here, but I also have no problem opening a separate web browser to browse the web.

Javascript hate: It's not hate when people bring up salient points. Just because the web platform is open and everybody is using it right now doesn't mean that it's perfect or above criticism.
Average chinese meal for one over $35? Sounds like a lot..
> Actually it kind of does -- saying one thing and doing
> another is a deceptive business practice, and deceiving
> consumers is generally frowned upon

False advertisement isn't the question here -- nice strawman.

Google specifically states they make no guarantees, so they're not "saying one thing and doing another." They're saying one thing and doing that thing. The parent mentioned that Google encouraged technological entitlement -- that may or may not be true, that would be a tough thing to have a reasonable conversation about -- not that Google is making blatantly false claims about its services.
I couldn't think of anything better <thumbsup>
Agreed. I brought up a system with nvidia-docker last week for a computer vision application and while it works, it seems fragile. There are more pieces than there should be and it seems easy to break. I also don't know if we can use multiple containers on one host, but it doesn't sound like it.

It is not the final solution for containerized GPU applications.
I hate this man and all he's done... it couldn't have happened to a nicer person.

I'm... confused.

Do you mean it wouldn't have happened to a nicer person?

"couldn't have happened to a nicer person" suggests this individual is the nicest person you've ever met.

Edit: completely missed the ironic usage.
So basically, you believe dangerous people should remain in society? Habitual criminals should continue to terrorize innocents such as yourself and your family, and you wouldn't even call the police?
So, "more expensive than AWS".
In this (US) society, you can speak your mind just about all you want without worrying about the government sending jack-booted thugs to haul you away.

However, this does not mean that a private company is obligated to give you a free platform to disseminate your speech. You can go make yourself a sign and stand on a street corner if you want, but no one has an obligation to listen to you, or to help you spread your speech.

This is why the distinction about government censorship is so important. People like you seem to think that private entities have an obligation to host other peoples' speech. If some neo-Nazis knocked on your door and asked to post a bunch of their signs on your lawn, would you agree to it? It's only a problem when the government censors because there's only one government, and they have enforcers who can use deadly force. If a private party censors you by refusing to help air your views, you can go somewhere else, like a street corner, and you don't have to worry about going to jail or being shot.
I'm Russian, and it's very jarring sometimes to meet or read about the daughter of immigrants who has a traditionally Russian name, but keeps the masculine last name. (e.g., Katerina Ivanov - which sounds really strange due to the gender mismatch.)
I wrote a Tinder bot a couple of years ago and ran some interesting studies:

1) I placed a male profile in ~10 different cities, auto-swiped for a few days, and waited for matches and messages to flow in. I found the match/message rates to be significantly different for each city. Sample size of ~34,000 right swipes.

2) A/B test two female profiles with exact same photos and bio except 1 was a CEO and 1 was Graphic Designer. Swiped on 1000 men in NYC and 1000 men in SF.

3) A/B test two female profiles with exact same photos and bio except 1 was listed as 29 and 1 was listed as 31. Swiped on 1000 men in NYC and 1000 men in SF.

Through my experience in this, I can see the methodology they used in this study could be flawed. Specific concerns:

* While I don't have any real inside knowledge into Tinder's "recommendation" algorithm of who they show to you, I assume there is a strong preference to show active users first. So if they are swiping on hundreds of thousands of profiles, they are probably burning through the legitimately active users in a region pretty quickly... that's one reason why they get a lot of matches quickly and not as many matches over time and end up with a 0.6% match rate.

* The number of messages that guys send (at least as of 2 years ago when I ran my studies) is wildly more than women. The male profile was seeing an 11.8% match rate, and a message rate of 15.3% from the matches for an effective message rate of 1.8%. Whereas the women were getting an 81.5% match rate, with 63.9% message rate from those matches for an effective message rate of 52.1%.

* I believe there is now rate-limiting on the right swiping, so after ~100 or so right swipes, you have to wait 12 hours until right-swiping again. Really not sure how they could have made it through hundreds of thousands of profiles unless they paid for the premium membership.

Anyway, interesting stuff regardless, happy to release more data when I have time, if there is interest.
you're right this is probably better inside the shell. That'd make it more cross platform too.

I was thinking a different approach on how it'd work. Since the goal is teaching, I'd prepopulate it with support for really basic stuff like cat, ls, echo etc. And the bottom portion would be focused on teaching how these commands work and guiding through most common use cases. Then as the user advances, they could install new modules. Maybe they now want to start text processing so could recommend they install the grep, awk or sed modules and then begin taking those tools on.
From the WWDC talks XCode looks quite close to VS experience.
It's well worth reading the above court case.

(In 1958, the State of Alabama banned the NAACP and tried to damage its finances and power by demanding its membership list. The Supreme Court saw through their "fig leaves" and overturned that.)
I was under the impression that training data needed to contain the answer to the question to be effective, while users of these models would be using them to answer questions.

Unless the users of this service then feed whether the answer given by the service was correct back into the service, I don't see how it would help to train their model.

Happy to be corrected by someone with a better understanding of the space.
It's not that surprising. Some estimates (I could be way off)

100 Engineers x 50 lines of code per engineer per week x 50 weeks per year (2 week vacation) x 4 years = ~ 1 million LOC
Man, FB is more prolithic in open source than Google. And a lot of their code is better, and more useful. Who would have thought?
Do they realize they are being throttled? Just because one end sends a swipe doesn't mean the other end receives it right away or at all.

Men who send a lot of swipes get their outgoing swipes throttled. Women who receive a lot of swipes get those swipes throttled, too.

Think about if you were the programmer working on Tinder. The first thing I would build is swipe spam detection.
Ok, thank you both. Makes a lot of sense. It's not what I need, but that's fine :-)

I've not really looked hard at (open)ssh and kerberos before - as far as I can tell, (open)ssh doesn't support kerberos fully - that is - it's not possible to simply use kerberos to authenticate both client and server to each other?

> When you say "simply automating the signing of ssh server certs", what differences do you mean from this? Because that's what this is -- automating the signing of ssh server certs.

I suppose the fact that you already have an x509 (and kerberos) infrastructure was one thing I didn't "expect" - ideally either one of those should be enough to identify server/services and users to each other -- I absolutely see the sense in leveraging that to automate ssh server cert generation - but it strikes me as a roundabout/complex way of solving the trust issue. Then again, composing a few simple tools might be better than trying to secure/get something like https://tools.ietf.org/html/rfc6187 to work...

In essence this places trust in the x509 infrastructure - I'm always a bit skeptical of schemes (most of which I must admit I've thought up myself at one time or another) that end up being "ad-hoc kerberos with public keys". They all feel straightforward on paper, but then I remember how many issues there were with getting kerberos to the place it is today, that is to say create an actually secure system...

I suppose strictly speaking, this is automating the signing of server certs - continuously. Which is a bit more than I meant - I was more precisely thinking of automating the setup of ssh server certificates, I guess. Perhaps with the possibility to push updates from time to time.

Anyway, maybe a sentence at the top of the readme along the lines of "Automating short-lived ssh server certificates on top of existing x509 infrastructure" would've made things more obvious.

Now that I have a handle on what this is, and the context - I suppose a similar infrastructure might be used for generating client certificates too. Perhaps semi-manually via a web-service that uses x509 client certificates for authentication, and perhaps ldap as a backend for authorization data.

It does appear that it's difficult to set up a fleet of ssh server so that there's no need to do a dynamic look-up to something like ldap, and still have sensible limits on who gets to log in to which server. I suppose one could use several CAs for signing user certs - one per group of servers - but that sounds a bit messy.

I suppose the other alternative is to do something with AuthorizedPrincipalsCommand[1] - but that also feels a bit messy...

For others contemplating playing with plain ssh certificates, I came across this, which is about as good a guide as I've read: https://ef.gy/hardening-ssh

[1] http://man.openbsd.org/sshd_config
WeWork Cut Forecasts as CEO Asked Employees to Change ‘Spending Culture’
I was traveling a good bit when I gave Tinder a shot (several months). Different cities gave me very different results. Hometown - nothing, not enough users so a lot of bots. Atlanta - tons of responses. LA - not quite as many, I probably didn't look as interesting compared to the other guys on there? Rome - Decent number, better than LA, not as much as Atlanta.

Then I met someone and we've been dating for 6 months so hopefully I don't get to test it out much more.