skysight-inc/HackerNews huggingface dataset:
The issue of official binpatches is not a critical problem, but it is still a problem. It is a security and usability issue simply not present in the vast majority of nix systems, and that should be acknowledged rather than downplayed, as this facet of OpenBSD is usually an unpleasant surprise for potential converts.

Repeating "secure by default" seems rather disingenuous when a freshly-installed system needs extra attention, and cannot automatically fetch the latest security updates.

Updates may be "trivial" to you, but they are still clearly more complex than the average system, as they require individual attention and recompilation. These speedbumps to security are not what "secure by default" implies.

Alternatively, relying on a third-party tool (and having to vet that extra party) is not "secure by default" either.

Your final points are distracting from the issue and verging on ad-hominem. Firstly, first-party binpatches are so prevalent that noticing their absence is hardly significant scrutiny. Secondly, just because OpenBSD is very good in some areas doesn't mean we can ignore deficiencies in other areas.
Totally! I'll shoot you an email and if you need help hacking on anything, let me know, I just live a life of fun hacking now. :)
> And if I am under pressure by the management is because I spent time developing without understanding what I was doing; a better developer would have gotten it right at the first try, and there would be no technical debt.

While this reasoning is probably not technically wrong, I'm not sure if it's relevant to the real world.

You can always make an argument of form "there exists a developer who could have got this feature right on the first try, with very little time spent." This simply does not matter when you do not happen to have that developer on your team right at the moment. The nature of the work is that you will work on a variety of things, and you won't necessarily be the best in the world at every individual thing. You're inevitably going to encounter work that's challenging enough for you where you don't get it perfectly right on your first try.

> If the managers/ product owners didn't produce clear requirements, it's not a technical debt, it's a sloppy job on their part.

It's a sloppy job on their part, induced by time pressure, which produces technical debt. I feel like you're just playing with definitions here to avoid admitting that technical debt can come from poorly managed time pressure.

> if I realize I didn't know what I was doing, I always refactor the code.

All that tells me is that you've never been under a lot of time pressure. That's not a bad thing. It most likely means the management at your companies have been competent. But it doesn't mean that technical debt does not exist or cannot be induced from time pressure in other companies.
There are perhaps missing details, but Guifi seems to have "become" a provider by having "enough" customers. They got a peering connection.

There's a threshold beyond which peering make more sense than transit... (http://packetpushers.net/transit-vs-peering-makes-sense/).
> Can I assume Google Play apps are "safe", at least from this type of vulnerabilities?

Looking at the crap that is on the play store, I wouldn't count on it.
Agreed. This is pretty much how I use exchanges.
I don't think so; at least I haven't had this thought and haven't heard it used in insults for the movement.

I've tended to assume that neo<foo> is disreputable in a larger sense, because it indicates a departure from older, popular principles. Modern neoliberalism in particular suffers from an association with neoconservatism, with progressives damning it as a vaguely social-left reinvention of Fukayama. Both have acquired a connotation of elitism, aggressive monetarism, and foreign intervention that sours populist movements from either side against them.
First of all, calling someone a fascist is different than calling someone Hitler.

Do you think such comparisons are automatically invalid? Despite there being multiple fascist parties throughout history.

If you think it's invalid for Trump, is it also invalid for Le Pen? Hofer?

> A politician using fear of something and promising something else is their bread and butter.

All politicians use fear occasionally, but for a fascist it's used as a wholesale replacement for ideology. Compare the acceptance speeches of Clinton and Trump and tell me there's no difference. Trump's speech was literally depicting America as a fallen nation beset by enemies within and without, only capable of being fixed through his singular vision.

> Every President skirts around the constitution. You can look up numerous examples where Obama has bypassed it or took a very liberal reading.

Yes, all Presidents try to push the limits of their power. They don't campaign on it though and gloat in it.

Take waterboarding, for example. Bush allowed it, but he didn't gloat about it and his argument for it was primarily that waterboarding is "not torture." Trump, on the other hand, makes no pretenses: he openly advocates torture, even if it is blatantly unconstitutional.

It's the difference between playing within a constitutional framework while trying to expand your power (most presidents) and having no respect for constitutional checks (Trump).

> The DNC emails recently came out where journalist were making sure their stories were okay with the DNC before publishing.

The DNC is a private organization. If a journalist decides to run stories by them, it's a bit ridiculous but in no way unconstitutional.

On the other hand, Trump calling for prosecution of anyone who writes negative things for him is literally what the First Amendment is supposed to prevent.

Look, I realize that a lot of people reach to the Hitler comparison far too liberally. I don't know a single other modern American politician who deserves the label. But to pretend that Trump is just another normal politician is to have your head in the sand. The previous nominee from his own party won't even support him, nor will the previous president. That's unprecedented. When you have conservative outlets like the National Review calling Trump a fascist, maybe you should consider that something's different this time.
Trying to rent in Vancouver is insane. Lat time I looked I had to schedule to look at places in groups. It takes mere hours for a rental to go from an AD to rented. Bidding wars are becoming more common. Top it off with the "renoviction" phenomenon and it all makes renting in Vancouver very difficult.
> This said, it is not clear that their analysis would catch apps that try to exploit these vulnerabilities.

I would hazard a guess that right now there a bunch of people at Google making sure that it does.
Would have been great if this version fixed the syntax.

Square brackets for function arguments makes no sense, neither mathematically, nor programming language wise :)

Same for Sin requiring a capital letter, and curly braces instead of square brackets for matrices
It seems a bug in the infrastructure when they switched generators is what caused the power outage.
Outlook for android gives you real push. So does the blackberry hub.
Qucs is the one I've heard of.

https://github.com/Qucs/qucs/
We should totally put a path tracer in it, that would be fun too. :)
I have the opposite issue with GMail. I spend the same amount of time removing things from the spam folder.
They'll just have to buy more Pockys!

Reminds me of Calvin eating boxes and boxes of "Chocolate Frosted Sugar Bombs" to get the flying beanie: https://chrisstich.files.wordpress.com/2014/10/ca4.gif
If a device has Marshmallow it can't write the system partition, isn't?

It can't be rooted because it will be detected
at boot
I find myself in a minority on this one, but a big part of why I switched to FastMail is Gmail's search was always slow and typically insufficient for me. E.g., Gmail didn't (doesn't?) do stemming, meaning I needed to memorize exact phrases to find messages. I've had no such problems with FastMail search and it's remarkably quick.
Political figures with little real power are almost always more popular than those who do wield real power.

Even the same person can see a big difference depending on the popular perception of their power--see Hillary Clinton's favorability rating after she resigned as Secretary of State vs. now when she is running for President.

If Charles, as king, tries to stick his nose in things, he will be unpopular. But if he remains a distant figurehead, I bet he will still be more popular than the elected politicians in Australia.
And opam (OCaml) is working on it too.
Slightly off topic but:
"Plus, you can use it as a portable disk. No "content protection". Yay!"

That was one of the best features of the original ipod line. Not only did was it a device to play music with, I could also use it as removable storage.
Is there anything employees can do to protect against such a horrible Zynga situation legally?
just lean on the shoulders of giants who have thought all these points out before, and use Erlang (or Elixir). That includes back pressure.

http://elixir-lang.org/blog/2016/07/14/announcing-genstage/?...
Wow, he's rather fond of himself, isn't he.
Dustin Kirkland Performance Tests Ubuntu on Windows
Check your privilege.
MWoS 2015: Let’s Encrypt Automation Tooling
Because the same developer with the same skills can often ramp up technical debt to get a feature out in half an hour instead of a day, and there aren't any developers who haven't felt the pressure to do exactly that.

Ramping up technical debt isn't always about speed, either. It's sometimes about risk - it's often less risky in the short term to copy and paste a block of code than it is to change a block of code and risk breaking something else.
SQLite v3.14 released
In N and in some later versions of M SE Linux will stop this.

They are exploiting a series of gpu bugs, and a IPC driver:

https://android.googlesource.com/kernel/msm.git/+/e8408e6dca...

https://www.codeaurora.org/invalid-path-check-ashmem-memory-...

https://www.codeaurora.org/use-after-free-due-race-condition...

https://www.codeaurora.org/projects/security-advisories/linu...

Which is now blocked by SELinux. The android security team has started killing off IOCTL calls which aren't necessary for normal apps. They are also nuking access to weird socket types. Including some Wifi related socket closures, which nukes a huge attack surface on the wlan side of things:

http://kernsec.org/files/lss2015/vanderstoep.pdf

https://security.googleblog.com/2016/07/protecting-android-w...
Learn online course anytime
Rufus – Create bootable USB drives the easy way
Thanks for you replies!
Everybody (in industrialized nations) should have 3 day work week.
Pricing pages of 30 popular CRM systems – look and learn
HN readers have had many opportunities to voice their thoughts.

This was discussion about this 9 months ago, when there were 15 different links to the article "Why Self-Driving Cars Must Be Programmed to Kill" - https://hn.algolia.com/?query=Why%20Self-Driving%20Cars%20Mu... , with about 30 comments across all postings.

A bit over a year ago there were 70 HN comments at https://news.ycombinator.com/item?id=9725288 to the story "Will your self-driving car be programmed to kill you?"

8 months ago there were 71 HN comments at https://news.ycombinator.com/item?id=10709264 to the story "Will your driverless car kill you so others may live?"

There's almost certainly more that I've forgotten.
Great news. I'm particularly excited to see that they're implementing more thorough builtins for working with ANNs and other ML abstractions.
I do wonder if they have ever thought of building a Mathematica Machine like the old Lisp and Smalltalk machines?
Okay, it's been said. Now let's move on. For more, see all previous submissions with SW as the author.

Beneath all the bluster, the product does in fact appear to be an embarrassment of riches for programmers (or at least its customers).
Playing the Long Game Inside Tim Cook's Apple
Meanwhile their own affiliate program offers something like a whopping 2%. No thanks, we'll send our traffic elsewhere...
Yes, that is completely unreasonable. I expect hardware to last atleast 10 years. Nobody wants to be on some kind of constant upgrade treadmill. Not to mention the enormous environmental impact of un-repairable computers that you have to trash every X years.
> but large centralized businesses are going to have a hard time avoiding regulation in the long term.

I think the key phrase here is "in the long term". Who says Bitfinex is in it for the long term? They say it? Why do you trust them?

A typical business will try to make money off you any way they can, scamming you if they deem it is profitable. The more legally gray area the business is in, the more likely it is you'll get scammed.

I think 'oolongCat was trying to point out that a centralized Bitcoin business may very well understand decentralization perfectly; that doesn't mean they will care about it in any way.
Southern rail strike: Five-day walkout begins
None of those laws apply on Mars, or anywhere else outside the Earth ecosystem.

The only people who might be negatively impacted by destroying any (or all) native Martian organisms are research biologists and pharmaceutical manufacturers, and they still have plenty of work to do with Earth species.

We can afford to debate the ethics of genociding xenospecies on other planets after we have replicated the Earth biosphere on a second planet. It sucks for Martian life--if it exists--but Earth needs Mars before exporting Solar life to other star systems. Martian species can either evolve enough to make a useful contribution--or at least enough to ask for mercy--or they can die and get out of our way.

That is the cost here. Are you willing to sacrifice every living human (or human successor species) in existence a few billion years from now for the sake of some suspected xenobacteria now? I am not. Protect Martian species at the expense of Earth species at your own peril. Attempting a Greenpeace-style "save the xenobacteria" sit-in will just get you thrown out of the airlocks.
So I can make a malicious module called expres and another one called expresss and screw with ppls machines?
SNAP benefits in 2013. SS Disability this year. VA funding in the current budget. You don't have to look far to find scissors-wielding politicians.
Yes, the submission site talks about removal, and how it takes until the next major release of the browser for the changes to appear in the codebase, and every user will have to upgrade to pick up the changes.

If it were a HSTS preload registry service and API, that'd be different, but it's not.
Seriously, git is overused, actually misused, in places where it's a bad fit, just because we know it and it resembles some desired characteristics of the problem at hand. This then leads to package indexes which periodically cull the history and force-push the index. I'm sorry, but while some of the architecture of git may be applicable, just taking git and using it as a package index is plain wrong. Also, putting that much of a load on free github repos is not nice towards github's already regularly DDoS'ed network.
> Long meeting times with the wrong people in the meeting? That's a managerial issue and has nothing to do with scrum.

If scrum tends to lead with long meeting times with the wrong people then scrum certainly should include safeguards against that. Otherwise we need "x+scrum" framework which includes these safeguards. I don't think scrum should fix every problem "in management", but "meeting management" should be a core scrum issue to deal with.
Would $500m/yr even be enough? I guess they could leverage their existing distribution network and stores...
Allegiant a budget airline that's okay when it works and a pile of junk when it doesn't. They fly routes a few days per week out of my city. In a recent cancellation (by choice), they told customers that they could rebook them on the same day next week. Somehow they managed to do this without offering refunds or alternative flights back that day, the next, etc.

I've only flown with them once, but it was a popular route to Vegas. It was fine for the price, especially since they don't surge as much as normal domestic airlines when you book with less than 2 weeks notice.
This was my favorite point out of them all:

> What about contributing to open-source software? Reading the code of an important external dependency, such as the web framework your team uses, and working on bugs or feature requests to get a better understanding was not part of any Scrum backlog I've ever seen.

Working at various startups, I have developed a methodology of contributing back to open-source projects we use without accounting for it in sprints or the ticketing system. It involves getting to the office an hour early, over-estimating on my other tasks so I have time for something extra, and a sprinkle of office politics.

And yet, it is some of the most valuable work I have done. Not for me, but for the companies I've worked for.

To get an in-depth understanding of that one Django or Express.js feature you use, or even better, to find and fix a bug that affected the business or may have affected it in the future, just gives you that much more of an edge over your competitors. Say goodbye to that nasty workaround you had to use to get around the bug--now it Just Works exactly how you need it to!

What's more, it's attractive to engineering candidates when you get to tell them the story of when you fixed a big bug in Socket.io.

The best engineering managers I have had have been receptive to the idea that this type of research and/or contribution to other projects should be considered "work" that provides value to the business.
I believe it is subjective to the individual. If a person doesn't have any ties (relatives or friends on the outside) they might never get to that point. What was key for me was that before I went first went down, I was a hobbyist programmer and had an independent, many-years long MMO game project under way. Being in prison chafed at me horrible because every day I felt like nothing was being accomplished towards it! I knew I was loosing time from completing that goal.

Its funny how the goal that I wanted to work towards changed from that game to a successful life.
Must you be connected to an Exchange service to get real push?
> There is also the problem that a lot of healthy food is ridiculously overpriced, catering to the upper middle class population who wants to "eat healthy" and believes some nice "feel good" marketing material instead of careful thought.

This has more to do with wealthier individuals who live in a bubble where they've convinced themselves that that "healthy" requires buzzwords like organic, non-GMO, free range, etc. If your normal diet consists of frozen chicken tenders and french fries, then switching to cooking your own lean chicken breast and fresh potatoes is a healthy upgrade to your diet, regardless of what buzzwords may or may not be on the packaging.
And if it turns out that retributive punishment does work effectively, are you willing to pay for increased crime rates just to find out that our current system is alright?

This type of what-if paralysis isn't rationally supportable. Some similar examples to show where the logic fails:

And if particle accelerators do produce black holes, are you willing to destroy the planet just to prove it?

And if it turns out Cthulhu does live on the moon, are you willing to unleash its wrath by visiting?

Instead of paranoid fear of worst-case hypotheticals, we should be using empirical evidence to guide decisions. We can look at other countries. We can look at differences between states and counties. We can conduct experiments in smaller areas and roll them out over time if they work. Or we can just have some basic human empathy.
I went back and forth on that statement for exactly this reason, but kept it because the whitespace is handled in the lexer, as you mentioned. The Python grammar itself is context-free, and the grammar is the only part that I expect the series to examine.
Mangueira favela Residents watch fireworks over the Maracanã stadium
Music Streaming Social Network “Whyd” Becomes Open-Source
NeoWize (YC S16) Personalizes E-Commerce Sites to New Users
I'm not going to generalize the entire republican voter base, but they contain a disproportionate number of "I've got mine, sod off" types of people backing them (not that the current democratic party could be seen as much better). Point is though, not every person who lives in a rural area is some idiot that complains about paying taxes while raking in farming subsidies paid by said taxes.
There are a lot of people telling me to be angry that poor people on welfare have big-screen TVs. In the internet personal finance community, big-screen TVs are the #1 example of frivolous irresponsible spending.

Those people aren't mentioning cable or the time spent watching TV. Just the fact that the screens are large. That may have been ostentatious in the 90s but it really isn't anymore - that's all I'm saying.
What's the salary range of this opportunity? Considered Berlin ops in the past but the companies are notoriously cheap. Always need to establish upfront if the company is one of the rare Berlin companies offering internationally competitive packages or another trying to get by offering experienced devs 50k EUR with .1%-.2% equity, fruit, free drinks, and a foosball table.
I was hoping this was going to be about designing message-passing systems.
+1. Just use Elixir.
Then the signatures don't match, or the fingerprint is wrong. If you're relying on long-term data access, messages encrypted against or signed by the true key don't match. This is an area in which PGP and SSH differ markedly. PGP is used to encrypt and authenticate data which tends to persist, SSH data used only in session. While both can use long-lived keypairs, it's the PGP keys you're more likely to notice changing (though SSH cclients tend to report this happening).

Yes, that means verifying your keys, and probably through an out-of-band method.
its not, its a different best practice just like online banking has different best practices than using checks.

bitcoin is the slowest of all cryptocurrencies and many people use alternate cryptocurrencies (colloquially called altcoins) that transfer to exchanges faster than bitcoin (2-10 minutes compared to 10-60 minutes)

so storing more securely in your own altcoin's wallet and transferring is very fast.

most people aren't selling bitcoin for national currencies when they are using an exchange, they are trading between altcoins and other cryptoassets.

In the 5% of the time you actually need a national currency, you deal with those fiat exchanges on the far edge of the cryptocurrency economy, and deal with their slowness and questionable security for a brief amount of time.

Also, although less true now, exchanges can't be relied on to broadcast transactions to pay for things as well as a software wallet does. So when you aren't speculating and trying to buy something in a time sensitive way (such as using bitpay or shapeshift.io), using an exchange as a personal bank account for online shopping results in a horrible user experience.
Ransomware, a Billion Dollar World Wide Threat
It's a bit annoying, but there are benefits to decentralization, too. If the banking system collapses, my Bitcoin are safe. If I get arrested, the government can't seize my assets. If I travel to another country, I don't have to pay any different fees to transfer my money there.
A Neuroscientist Explains Why Your Brain Is So Anxious All the Time