skysight-inc/HackerNews huggingface dataset:
Having written code in Python for a few years, I've come across most of these (some of the ways to hack builtins/modify the code on a function reference were new to me).

However, it had also never occurred to me to make anything I cared about the security of in python. Perhaps this article is aimed at people who are writing system utilities for linux distributions, and are considering Python? Presumably some such utilities are written that way already.

It comes down to doing a proper security analysis before you define the requirements of the software: Specifically what attack vectors you want to defend against. A valid conclusion for some types of software, given the list of "bugs" in the post, would be don't write it in Python. (Indeed, I have done exactly this before writing 200 lines of C instead of 20 lines of Python.)
Why is printing “B” dramatically slower than printing “#”? (2014)
Doesn't work with adblocker enabled.
The most shocking thing (when I fasted for 5 days) occurred when I broke the fast. I broke it with 4 ounces of liquid (50% watermelon (straight from the fruit) + 50% water), only to have it come right back out 15-30 minutes later-- just as red as it was when it went it. It was mind boggling. I suppose I had gone my entire life thinking what comes out was always supposed to be brown, but when I looked in the toilet, all I saw was red. I couldn't believe it.

Also, I'm not dead. And lucky enough for me, I wasn't very toxic, so I easily went 5 days on nothing but water.
Starting this week-end: The Domain Conference
How I designed the Envato Blog in 8 days
World of Warcraft – Legion
> I've never encountered the "X requires unstated requirement Y, which fails to build because of obscure compiler error" issue, I would have liked if the author named X and Y.

I've encountered this sort of thing plenty; usually it's not a python package that's required, it's a package you need to apt-get, and then another error pops up because that first one wasn't the only thing you needed.
Another nice example of what the author complains about, a "it's your own fault" reply whenever someone complains that the official language docs are hard to understand.

Personally I almost never find any use from the docs whenever they come up in a google search, its almost as bad as those expert-exchange hits that used to appear. The core issue being that pythons docs are only a language reference for the vast majority of the standard library, and the size of the stdlib bein one of pythons strengths.
For the record:

option-n and then 'a' will create ã

option-n and then 'o' will create õ
As a counterpoint, I was surprised to see we've had very little trouble with our *.solutions domain, even from clients who are otherwise not very tech-savvy.
This is why i built a hackintosh instead. Apple simply cannot sell me a machine with my current configuration.
Clickable link for convenience:

http://kurokesu.com/main/2016/08/29/long-range-license-plate...
My point was that a programmer thinking about the Universe every night is no different that someone watching football every night. Neither will have any meaningful impact on the species. If his job was related to the Universe or physics or math or something, sure. But he writes CRUD apps for SV startups or maintains COBOL for a bank. 500 years from now we will be no better nor worse as a species for the hours he spent thinking about quasars.
>'There must be no classification of people, for example, on the size, age and the like'

That's a bit hand-wavy.

Meanwhile there's actual research going into this problem

http://moralmachine.mit.edu/

http://news.mit.edu/2016/driverless-cars-safety-issues-0623

https://en.wikipedia.org/wiki/Trolley_problem
> A valid conclusion for some types of software, given the list of "bugs" in the post, would be don't write it in Python.

Do you have some specific types in mind? I know some types of protection are not reachable from python directly and require native modules, but I'm not sure what would cause you to drop Python altogether. I'd be interested to hear some examples.
http://jobs.remotive.io/
I'm curious, is there a way to "profile" an excel application? If you suspect a sheet is taking longer to calculate than it should are there tools that can help you drill down to discover the bottleneck?
The article, and many professional functionalist lingusts, confuse Chomsky's Universal Grammar theory and its later "parameters" revision with the much more general hypothesis, also advocated by Chomsky, that human language grammar is somehow computable in a logical sense, formed through the application of objective and universal (with a small "u") logical rules. They prefer to view language rather as some sort of nebulous and inherently unquantifiable expression of the human spirit that is intrinsically bound to the unique cultural attributes of the society that produces it, a precious snowflake different from all others, which cannot be related to other languages through universal logical principles.

They feel that the notion of universal (small U) principles of grammar somehow robs language of some essential human qualia by reducing it to a mere mechanism, and moreover many postmodernist linguists believe that the very idea of objectivity in language, to include supposed universal grammatical principles, is somehow part of a broader imperialistic plot by evil white heterosexual men to oppress and subjugate the glorious Other through malicious efforts of universal grammatical classification. (Yes, seriously. Your tax dollars support more than a few professors who believe this is true, in all seriousness, and teach it to impressionable young students every day.)

These fears do not, however, have any bearing whatsoever on whether human language is, as a matter of fact, computable, the result of some set of universal logical principles. It either is or it isn't, and wishful thinking about how we would like to conceive of language has no bearing on whether that is true or not. That is not how scientific knowledge works. (Of course, many denounce the scientific method itself as merely another tool used by evil white straight men to oppress the Other, and this despite the fact that it was invented by Arabs.)

The anti-computation camp frequently conflates Universal Grammar or parameters theory with the question of computability in general. When any evidence comes out that shows that a specific portion of UG is probably not true, they crow triumphantly about how language is really fundamentally something ineffable and pseudo-mystical, not able to be computed by logic.

UG and the computability question are not the same thing. UG is a specific proposed model of language computation. It has largely been falsified, shown to be inconsistent with the empirical evidence of how actual languages work. That is fine. This does not imply anything at all about whether language is universally computable according to some model.

It just tells us that language is not computable according to that model, not that it is not computable according to any model.
You weren't very toxic?
• Enable the compose key on Linux — I set the "Menu" key to be compose — then the sequence is Compose . =

Characters like →, —, €, £, ©, ™, µ, ①, ②, , °, “ and ”, … and ‽ are easily available, as well as most European-ish letter accents: àáâäąȧåảāãæ.

(I live in Denmark, but rarely type Danish. The compose key is more than adequate for typing København, Østerbro and the Æ in my street's name.)

https://en.wikipedia.org/wiki/Compose_key
> people acquire the grammar for a language in a certain particular order, independent of the order in which is is presented

I didn't know about this. It sure makes sense. Do you know of any institute, course, or individual that makes use of this fact in order to optimize for learning a new language?

I need to learn German, and let's just say that I find the traditional learning methods almost impossible. And I have been living in a German-speaking country for over 5 years now.
Or, more simply, `.@.`.
It's entirely solved with binary packages if you look at Java. You can even get a whole headless webkit (ui4j) setup from 2 maven packages without having to ever touch apt.
If you have the process quit it definitely stops them from being false though. I thought that was the point of assert()?
Malicious ZIP archives found in the AKP leak on the Wikileaks site
Why Keto diet is bad for you and can prove fatal
Ingesting anything will ruin the fast. Even brushing your teeth becomes tricky, as toothpaste can ruin everything. I ended up using a salt water solution (and an electric tooth brush) to do the job, but in hindsight, I could've used something like ToothSoap. It's extremely important to rinse the mouth thoroughly, so you don't swallow anything.

It is possible to run low on vitamins (depending on how long you go). If it's just 3-7 days, then it doesn't matter as much, but some people go a full 28 days (you can theoretically go about 40 days without causing problems, but as it will take another 40 days to break the fast, it proves to be too much for someone's first time (with 3-7 days working better)).

The step in a water fast that does most people in is the breaking of the fast. The key to a successful water fast is properly breaking the fast. It can be even more difficult, as while any hunger usually goes away within the first day or two, when the fast is first broken (with your first taste of 50% watermelon + 50% water, for example), it will kick the digestive system back into action, and you may easily become overwhelmed by an intense hunger. If you don't have the willpower to ignore this hunger, then you may end up eating something prematurely or eating too much.

The solution that works for most is to either buffer up on vitamins and minerals in the weeks leading up to the fast (which also ensures they don't have any hidden deficiencies), or to start with a juice fast (vegetables blended in a Vitamix, for example).
> picture someone would have an easier time remembering that a function is called RECHERCHEV than if it were called VLOOKUP

Yes, but then make that language a user-switchable parameter... It is not like Microsoft is shy of adding parameters to the settings dialog...
Waking Up to Data Leads to Doing Better Under Pressure
The problem is when you try to extrapolate the blockchain concept to old financial institutions and you really mean "modernization". It is very difficult to read articles about blockchains from financial institutions, they are just forcing a concept and deceiving.

I have also a company in this sector. In our talks with banks, stock exchanges, and government they say they want a blockchain. When we ask how many nodes they will run, the answer is usually one.

I also believe the cryptocurrencies and blockchain concepts have a lot of applications in Internet, but currently they mainly offer solutions for the dark and lighter nets.
When I was fasting (about 2.5 weeks), I ingested nothing but water. I don't think you need to be worried about running out of essential nutrients when you are only fasting for 3 days. Personal experience, of course. No empirical evidence.
They money quote for me, especially relevant to the parent, is:

'The planet isn’t going anywhere. WE are!'

(but yes, more generally short term thinking has to go both ways - we do things that damage the biosphere because we don't think ahead, but we also think far enough ahead to see the ways the planet (or even just our economy/ecosystem) will react - see plastic degrading bacteria, peak oil)
Many people have been and are contributing. But when there isn't critical mass or appreciation for changes they move on to other things. So the python community is not only left with the flaws but can't attract people to fix them.
I think you meant to share this link: https://envato.com/blog/designed-website-one-8-days/
Hidden prefs are hidden for a reason and can be a foot-gun. The warning when opening about:config is no exaggeration, and copying-and-pasting a bunch of hidden prefs from an untrusted source is not a good idea.

For instance:

> user_pref("network.cookie.cookieBehavior", 1);

If I remember correctly, this may break some sites.

> user_pref("dom.battery.enabled", false);

Questionable value for privacy / fingerprinting. If you plug-in your computer or pull the plug (a pretty common scenario), the site trying to identify you will suddenly think you're a different users.

> user_pref("general.buildID.override", "20100101");

Pointless since 20100101 is already the default used in the user agent string. Makes me think this list is severely outdated or the author doesn't know what he's doing.

> user_pref("browser.newtabpage.enabled", false);

Little impact on privacy (is this about the "somebody opens a new tab in my profile and sees what sites I frequently visit" scenario?), no impact on fingerprinting. The readme says "Impacts on user experience should be minimized, erring on the side of convenience." How does disabling the new tab page satisfy that?
He also stated that it will be a non-freemium game, which I think would hurt the Nintendo brand. Hopefully they don't go down that road.
You're arguing for magic. If brain function does not follow from our physical makeup, then where exactly do you think it comes from? Sure learning is like exercising a muscle and can shape your brain, but environment affects muscle growth too via exercise and nutrition. Would you deny that your genetics place an upper limit on your achievable strength?

Sorry to say, there is already plenty of evidence of direct genetic impact on cognitive ability that you can see with your own eyes, even ignoring the twin studies that all but prove that cognitive functions are largely heritable. For instance, down syndrome, Tay-Sachs disease and Leukodystrophies.

The scientific case is in: given comparable nutrition and a standard education, your intelligence as compared to your peers is determined by your genetic makeup.

This says nothing about your work ethic or your determination of course, and thus what you can achieve if you put in enough effort. Intelligence is merely a metric stating that given the same amount of work expended on cognitive problems, those with higher intelligence will do better on average.
Fair point, that's not my field. Just be warned if you are interested in an academic career: you won't fix, or even make a dent in, the competence gap in industry by becoming a professor.
I was referring to the post I originally replied to, which has since been edited. It called "city people" selfish, depressed and obsessed with money among other tired stereotypes.
That's like saying people shouldn't read FAQs because they should rather read the documentation. These things aren't actually mutually exclusive.
This type of discourse should take place elsewhere.
Accuracy problems in floating-point computations: https://en.wikipedia.org/wiki/Floating_point#Accuracy_proble...
How's the tech industry?
I am an advanced programmer.

I shouldn't have to read code snippets to figure out if a function returns a tuple or a 'group' which can be iterated over, but can't be indexed. This is something which would be fixed if the documentation included types, because then I could check what all the allowable operations on 'group' are directly without searching for a code snippet which does what I want or just running it and praying I got it right.
> he kind of technical documentation I love to read: precise

Nothing precise about it. Method signatures don't even include a clear description of what they can f return! I have to go and fish this infos from the text blob below. Even JavaScript gives you a damn return values section for every method: https://developer.mozilla.org/en/docs/Web/JavaScript/Referen... . I can't expect a type signature like in OCaml or Haskell (yeah, H sometimes gives you only a type signature which is even worse...), but still.

The cool thing about Python is not the high quality documentation. It's that you can still be productive in it despite it being a dynamic language with such a horrible and fuzzy documentation :) Guido really did a fine language design job.
Thanks both! I believe the native Mac announcement is what put me off track.
A billion downloads for Super Mario Run is a pretty realistic estimate, I think.

Of course there will always by cynics calling that a failure, whatever the percentage of buyers.
https://www.youtube.com/watch?v=Kp84tCkNiFg
ICICI Bank Hire Robots That Process 10 Lakh Transactions/Day with 100% Accuracy
*Under Pressure = Barometer (which is correlated with various weather patterns and doesn't require other connectivity to function).

Full disclosure: I'm one of the devs and I would greatly appreciate hearing your thoughts about LightNudge. What do you like about it? What is confusing or unappealing about it?
The Story Behind LinkedIn’s New Publishing Platform
PHP is just as old and when I learnt PHP 14 years ago the docs were really friendly back then too, I loved being able to go to php.net/func_name and get a good description of how it worked. Of course this is for the standard library, which is what the article talks about, but PHP's standard library (at least then) had much more of the kitchen sink thrown in it.
It seems Outside magazine propelled itself from obscurity by driving traffic to its site with population contests through Facebook. People tend to vote familiarity, so the larger metro area of the two tends to win. The exceptions are the tourist towns that have regional pull. I'm impressed this method continues to work.
Yes, it is intended and fully part of the philosophy behind the language's design (as shown in PEP-20, aka the Zen of Python):

> Explicit is better than implicit

So there's no "leaking" of implementation details, because the implementation shall always be fully exposed.

As said in a sibling post, the private fields are just public fields, which are not documented as part of the public API and start with a `_`.

And as I said in the parent post, the reason to use the name mangling mechanism on top of that is to ensure that those variables won't be used by descendants in the class hierarchy, when a given class is intended to be subclassed by a peer.

The the sugar /is/ actually sugary-sweet-yummy, as it's preventing potential faults from people who blindly subclass stuff they haven't read the source code of.
My bad, wrote rounding not accuracy. (corrected now) But my point was that it's not related to weak typing as the parent seems to suggest.
I think the Mario IP combined with an App Store feature, which it is almost certain to get, should give it respectable enough download numbers for Nintendo to consider it a success. Endless runner games historically don't monetise as well as other genres so allowing the user to trial the game then pay a fee for full access might work out better for them than if they had went the micro-transaction route.
The decision to include the one off payment would suggest to me that they don't see it as an ever-green game with monthly updates like Pokemon Go and expect it to have a much shorter life.
If you do decide to move forward with it, check out https://www.indiehackers.com/businesses for inspiration, there are a few people doing similar stuff. Some direct links:

https://www.indiehackers.com/businesses/updown-io [ 1.5k/mo ]

https://www.indiehackers.com/businesses/amon [ 1.5k/mo ]

https://www.indiehackers.com/businesses/apex-ping [ 1.0k/mo ]
Loaded in about 15-20 seconds for me. Even if you think medium.com is slow, they can handle the sudden extra load that your site couldn't.
I have not watched that series, though I was not laughing while listening to the Joel's talk..
It's not an implementation detail, it is a deliberate, specified and documented feature of the language dedicated to namespace conflict resolutions in the context of inheritance.

ref: https://docs.python.org/2/reference/expressions.html#atom-id...

ref: https://docs.python.org/2/faq/programming.html#i-try-to-use-...
Yep, that's what I meant to do! Thanks.
"I know of an uncouth region whose librarians repudiate the vain and superstitious custom of finding a meaning in books and equate it with that of finding a meaning in dreams or in the chaotic lines of one's palm ... "

JL Borges, The Library of Babel
The advantage of Python is that you do not need to think about type labels: "If it looks like a duck, swims like a duck, and quacks like a duck, then it probably is a duck."

For example, the builtin print() function accepts any object with write(string) method as the file parameter.
There are ABCs classes that capture the "duck" essence but it would be an unnecessary pessimization to require a io.TextIOBase instance as the file parameter in this case. Don't write Java in Python. Go's io.Writer would work in this case (the type label as the documentation and the exact specification) but if you don't mind thinking about type labels and/or believe that the type of bugs that can be found by a compiler worth the trouble instead of just writing tests and expressing directly what you want the code to do then using a statically typed language make sense.

Though there are type hints (proposed by BDFL) in the recent Python (to enable better static analysis, IDEs code completion and refactoring) https://docs.python.org/3/library/typing.html If its usage is not limited (e.g., through Python culture convention); it could be a regression in Python evolution. If your API is so enormous that you need type labels; you should split it. Python code should communicate the intent to a human first over a compiler/static analysis tool.

Here's a static typing programmer perspective (how it feels) on dynamic languages "What is the appeal of dynamically-typed languages?" https://gist.github.com/non/ec48b0a7343db8291b92
No, it isn't. You can get it running Chrome OS, but these ThinkPads run Windows and that's why the battery life is so terrible.
Well, private fields are all members starting with an underscore and that are not publicised in the documentation.

/That/ includes double underscores mangled members and and "magic" methods.
It's quite surprising that my disposable virtual machine's firefox in Qubes OS is unique among all tested so far...
St. Jude Medical Brings Legal Action Against Muddy Waters and MedSec
Location: Bangalore, India.

Remote: Nope.

Willing to relocate: Yes

Technologies: Python, Openstack(django, flask, cherrypy..., Oslo-libs), AngularJS, C, C++, Sql, Qt, Haskell (in decreasing order of experience)

Resume: https://goo.gl/znCpzU (google-drive)

email: inside cv

https://github.com/sum12/python-rtmbot - personal bot for use on daily basis. (https://github.com/sum12/python-rtmbot/blob/master/lib.py)

https://github.com/sum12/songbook - dynamic video-clip-loops for guitar practice.

https://github.com/sum12/spreader - speed reader, speed controls, play-pause, qt-experiment.
So guilds are effectively OS-managed processes?
You still have to brush your teeth when fasting. Scrape all that plaque biofilm off your tongue. Plaque bacteria feed on all sorts of nutrients in your mouth and in your saliva, not just food residue.
Just FYI, RE humain, probably wanted 'humane'.
"There is no use case for the headphone jack that can't be better handled by the lightening connector or bluetooth."

Using a quality external microphone.
> But my point was that it's not related to weak typing as the parent seems to suggest.

And you're completely right there. Any language using floating-point numbers will have the same issue regardless of its typing discipline e.g. Rust: https://is.gd/4BNoWa
ThinkPads used to be uniformly excellent, but these days it's a crapshoot. Even the best hardware comes with Lenovo's software installed and my advice to anybody that buys a ThinkPad is to remove as much of the Lenovo bloatware as you can.
Who needs this except of those who has nostalgia? It's the same as releasing pong or space invaders for iOS. Fun to play for 5 minutes and delete from phone. Nintendo stuck in 80s in technologies and it's only trademark-holder now. It's already myspace of gamedev.
How does this compare to ledger?
Mentioning Rust on HN inevitably summons Steve Klabnik. Its just the way it works.