skysight-inc/HackerNews huggingface dataset:
WoSign brought StartCom but didn't tell anyone (against Mozilla's root cert policy) and insisted they were separate businesses when called out on it. Mozilla looked into it, found evidence that StartCom was now owned by WoSign and WoSign finally came clean they owned StartCom.

The reasons StartCom is being distrusted too is because the WoSign code base (that a couple of parts are shared with StartCom including the issuance tech) has been found to be buggy so until qihoo 360 (WoSigns parent company) can prove that WoSign and StartCom are now 2 complete separate businesses as part of qihoo 360's plan to remove WoSigns CEO and separate the companies the loss of trust has to be applied to both.

Oh and that loss of trust... WoSign's CEO (someone who has been in on CA/B forum meetings discussing the sun setting of SHA1 certs) authorised a backdated SHA1 cert to be issued for an AU payment processor and bypassing the legit method of applying for one (which he was also at the meetings that set up the SHA1 exception process) using StartCom's root while insisting the two were CA's were not linked.

So Mozilla have said if qihoo 360 break up WoSign and StartCom (as qihoo 360 proposed), StartCom doesn't share WoSign's infrastructure after the break up and can prove this to the Mozilla community that StartCom and regain the trust of the Mozilla community they won't have to wait the min year to reapply.

Apple were quick to kick WoSign but qihoo 360/StartCom had requested a meeting with Mozilla to discuss a mitigation plan (Relieve WoSign's CEO oh his duties, separate the two CA's, put in respected security people as CEO's in the two broken up CA's) to get back on the road to solving this fucking mess.

Guess that looking at the evidence Mozilla released Apple's root team decided that WoSign had already lost their trust but wanted to hear out qihoo 360/StartCom before making a decision on StartCom too.
It doesn't help to find a misspelled property (and doesn't prevent you from dividing by zero too). You need a static typing system like TypeScript to detect such kind of bugs.
Today in  history: Yeager breaks sound barrier
> Flynn has no BOSH equivalent, so there's nothing there to bring back VMs when they fail, perform rolling upgrades or manage the IaaS

Flynn auto-heals after node restarts (and if it doesn't that is first and foremost a bug we need to fix), but also has a cluster monitor service which brings services back online automatically, and as a last gasp there is `flynn-host fix` for manual intervention.

Flynn has node promotion / demotion so you can totally do rolling upgrades (users have reported they do this with a modified CloudFormation stack for example). There is also a built-in updater to update to a more recent version of Flynn.

> Flynn doesn't seem to offer a metrics stream, only logs

Something I think should be built-in, but there are many off the shelf solutions which can be deployed to Flynn as apps.

> Flynn builds apps from source, so not sure how that works for compiled Java/Go, or anything you'd run with a binary buildpack

Flynn has built-in buildpacks but also supports running custom buildpacks (see https://flynn.io/docs/apps#buildpacks). If you just want to deploy binaries, you can either:

- use the inline buildpack: https://github.com/kr/heroku-buildpack-inline
- deploy a tarball: https://github.com/flynn/flynn/issues/306#issuecomment-23321...
- deploy a Docker image: https://flynn.io/docs/docker

> I couldn't find anything about role-based access control in Flynn, something Cloud Foundry has (which can be backed by LDAP for enterprises)

Flynn does not currently have strict access control, but work is very much on the way, see our security improvements project: https://github.com/flynn/flynn/projects/1.

> Flynn only appears to route HTTP traffic, so no TCP routing for IoT workloads

Flynn supports TCP routes, although it does not seem to be documented very well: https://flynn.io/docs/cli#route
Just don't rely on Verizon for your own 2FA security, partly because the phone system is too easy to redirect and spoof in various ways, and partly because Verizon is too easy to social-engineer.

https://medium.com/the-coinbase-blog/on-phone-numbers-and-id...
Python's implementation of sum doesn't care about types, the function looks something like:

def sum(iterable):
r = 0
for v in iterable:
r += v
return v

it always starts with an integer, and since int.__add__(str) returns NotImplemented it tries str.__radd__(int) instead, which raises an AttributeError because str has no method __radd__, so no summing of strings and integers.
We will do nothing, it's too late.
right, a higher quality pastry chef produces higher quality pastry and as a consequence of that the higher quality pastry chef should also be the more expensive pastry chef.
returning multiple values was the key part of the sentence
In aggregate it is "our race" as a generalisation. China is doing more than any other nation with clean energy, yet still has the vast numbers of coal power plants. There's no global agreement to not open new gas, coal and oil fields.

The UK govt just overruled local govt and forced acceptance of fracking in two locations. To meet the Paris accord that they signed, no new fossil fuel fields can be developed. To meet 1.5C they need to use no more than 1/3 of current fields[1]. Aus just opened a huge new coal field.

In doing that they've probably negated all the recycling and economising of every UK household. That single act makes it hard to see the point of continuing any individual effort. We're not doing enough, we're not going fast enough.

So whilst you and I may not suck, the folks that control the big levers seem to. There will come a point, I know not where - perhaps already passed, but soon(tm), where it's too late. That will be difficult to explain to my children. I'd prefer not to need to.

[1] https://newrepublic.com/article/136987/recalculating-climate...
Nearby galaxies will only disappear for practical purposes: Their light emission will continue to reach us, it just gets increasingly redshifted. In fact, if we were able to detect them, we would continue to discover more and more galaxies, but the total number will asymptotically approach a fixed value (ignoring the change in numbers due to galactic evolution).
KDE 1.0 was release in 1998, almost two decades ago. Even a decade old machine low-end machine is scifi-high-end by 1998 standards.

That being said, it may be impractical to browse the modern web with KHTML 1.0 (from which webkit was forked by Apple, hence it being a remote ancestor also for current Safari and Chrome!).
Maths becomes biology's magic number
Yes. Haskell's type deduction is exactly what I was thinking of as I read the article. You write a function using what you need and it deducts the requirements based on usage, giving you the most general type. I think this is actually very close to compile-time duck-typing. Actually I think if you took the class declarations out of Haskell and removed the instance lines (but left the subsequent implementations), and had the compiler deduce typeclasses for you, you'd get something that felt very much like compile-time duck-typing.
> I just don't know that building cars is the same as building websites and apps.

Indeed it isn't. "Maintenance" has opposite meanings in those worlds: maintaining a car means keeping its original functionalities still available; maintaining an application means letting it evolve.
Ken Bone Forgot to Delete His Reddit Porn Comments
Was he paid to do it? It might just be a fun side project for him. If you don't like it, don't use it.
After 12 years? I wouldn't consider them to be the exact same as when I left them at least.
KDE was the first desktop environment I really stuck with on Linux, previously I'd just used Blackbox and whatever apps seemed to work. For me, it peaked around KDE 3.2 - it felt like a nicely structured, object-oriented system. You could open up KOffice documents in tabs in Konqueror alongside web pages, thanks to KParts. Every address bar and file dialog could connect to any protocol, thanks to KIO. KMail and KNode were functional and consistent. KDevelop was very nice, for someone coming from a Visual C++ background. And Atlatik stole more hours than I can remember.

I have to admit I drifted off to OS X for most stuff, but I still have fond memories of how well thought out, consistent and tasteful everything was.
Looking across history, it seems like the GUI side of _nix had something of a seismic event somewhere around 2007. A event that has still not settled down to this day.
Text is a raw data structure, it's just not the one that's used behind the scenes: Everything is a datastructure. And actually I do touch the data by manipulating text.

>From the sidelines, your approach is "all I have are nails and all I need is the biggest hammer you can get me".

From my perspective, my approach is "that development environment sounds really unpleasant, and while I can appreciare the elegance, I'm having trouble finding the relative upshot."
I've been using Linux exclusively since ~2001, and I used to keep going back to either E16, or Gnome+E16. It's fast, unobtrusive and strikes a nice balance between customisation/eye-candy and minimalism.

These days I use tiling WMs (mostly XMonad), but if I were to go back to stacked then I'd probably end up with E16 after a while :)
I think the correctness guarantees that Rust provides are a little stronger than what Delphi provides.
In 1985 I'm sure they didn't use computers for gaming. I think it's a little more profound than that, I think its about people mindlessly letting tech run their lives, never stopping to think the impact.

I found it surprising that people had these concerns about radio and tv in the past, just as we today have about computers and cellphones, etc - eg: just watch parents with their kids and tablets.
Does anyone else find it hilarious that this site doesn't work without Javascript?
But the expansion of the universe is accelerating which tells us we are not in a big crunch scenario. And we have probed the laws of physics over very long distances and far into the past by looking at very distant objects and have to date not found any strong evidence for varying laws of physics over space or time. There are for example some claims of variations in the fine structure constant but as far as I can tell those claimed variations may still be explained by experimental errors and are therefore not widely accepted.
...You should probably tell people if you cite yourself.
> My actual areas of expertise (for the last 10 years) are 3D graphics and computational geometry.

If I may ask, what put you off your former field so that you decided to move to the server-side world?
Not true. We will continue accelerating until the impending crash is blindingly obvious. By which time it is far too late.
That sounds cool :-). Let us know when you release.

As for your opinions on perf, I can see where you're coming from, but I'm a Lisp programmer. If I agreed with you, I likely wouldn't be one.
Happy to see Flynn get more adoption, it got featured in the cron.weekly newsletter a few months back, when it was in the earlier stages; https://www.cronweekly.com/issue-39/
If you're only using standard ES6 features, you may be able to switch to Buble. I got a pretty significant speedup after switching one project to Buble ES6 compiler.

https://buble.surge.sh/guide/
ah ok cool. thanks !
It is a consequence of being an enterprise language.

I imagine you never had the pleasure of doing enterprise distributed computing projects via CORBA, DCOM, SUN-RPC, DCE in C, C++, Visual Basic and Smalltalk.

Guess where those enterprise architects moved on.

EDIT: Should have mentioned Delphi and Objective-C as well.
I think bringing CO2 down to pre-industrial times would be a pretty save bet. If we had a source of massive CO2-free power we could extract CO2 from the atmosphere and turn it back into coal, effectively unburning all the coal and oil that we burned so far.

Technology that tries to undo climate change without that is what's risky.
I sometimes have to write some python script. The documentation documents return (and expected) types, but in a manner that is a bit alien to C or C++ programmers. It is more talky. It is probably in dynamic nature of python.

Instead of a list of possible returns with some kind of prototypes you may be left with description: "The returned object is always a file-like object whose file attribute is the underlying true file object.".

See for example documentation for tempfile.NamedTemporaryFile [1]. This time possible returns are not in the separate paragraph as is in many other cases. You can't click anything expect TemporaryFile(), so you have to search for proper reference. The information is there, but instead of quick glance you have to parse and search more text.

[1] https://docs.python.org/3.6/library/tempfile.html
Ubuntu 16.10 Released with Focus on Containers and Cloud
My wife and I did in fact buy our wedding cake from the Publix Bakery near the church. We were extremely satisfied with the quality and the much more affordable price. Enough cake for a couple hundred guests for about $400.
Yes but you still need to trust the central authority then, meaning one person will know everyone's salary (he who generates all the tokens).

If you really want a cryptographic secure process, the key word to begin your journey would be "secure multiparty computation", and a very appropriate example in the book modern cryptography[1]:

[1] https://cs.stanford.edu/people/eroberts/courses/soco/project...

Basically your first solution but encrypt the communication between parties to prevent the n+1 - n attack.

edit - Only say infinite8s reply now, which is almost verbatim my reply including the same link.
> To fly Orion you have to put hundreds of nuclear explosives in orbit and pinky-swear that you're not going to use them to obliterate your enemies.

To reiterate berntb's point: Every nation who has the ability to do this already has ICBMs that can deliver nukes anywhere on the planet in 20 minutes. So what difference does this make?
A main advantage of Flynn over using docker-compose is that Flynn is more aware of how to run applications out-of-the-box, rather than just running containers which the user has to fully configure.

For example, Flynn comes with PostgreSQL, MariaDB and MongoDB appliances which are deployed in a highly available, fault tolerant configuration with sane defaults: https://flynn.io/docs/databases.

Through the use of buildpacks, it is also straight forward to deploy applications written in many popular languages and frameworks without being intimately acquainted with how to containerise those types of applications (e.g deploying a Ruby on Rails app on JRuby: https://flynn.io/docs/languages/ruby).

You also get things like full cluster backups (including all your data), simple git / docker / tarball based deployments, log aggregation, release rollbacks, domain / path based routing, service discovery, and many more!
What Should I Know Before Starting to Work at a Data Center?
Allocation with a modern GC is just a single subtraction in most cases: it's very fast.

Deallocation is obviously a lot more involved, but it can be done in parallel on cores that may sit around not always fully utilised.

Compilers can normally max out all the cores you've got during a full build, so perhaps in this case it doesn't matter: enhancing the parallelism doesn't help you. On the other hand if you're rebuilding a single file due to incremental compilation, it's probably hard to parallelise that entirely by hand, so shoving some of the memory management work onto your spare cores can help.
Benchmarks or no you haven't.
> Only engineers care about programming languages. Seriously. That's it. No one else cares about them.

So what? Who else could care for something apart from those professionals using it?

Maintenance is the biggest part of software development. A wrong technological choice can turn my nice job into my worst nightmare. Why shouldn't I care?
I prefer to think of it as "rapid prototyping".
Evolution of Formula 1 racing games 1976-2015
the JS library itself (V7) is not hardware dependent; you can just include it in your project on esp32 and use it.

However it doesn't include bindings to your device SDK, e.g. timers, gpio etc.
We didn't port the whole Mongoose IoT FW to esp32 yet.

The Mongoose IoT FW includes other things such as a configuration system (via serial or http), mdns discovery, full OTA, and a few fixes against the base espressif SDK that improve network reliability, fix libc bugs, replace the malloc allocator to reduce fragmentation etc.
Nice, but I would rather like to see an AOT Scheme compiler given that this tiny computers are quite powerful vs the mainframes where Lisp was originally created and they did support AOT compilation.
It's a big warning flag for everybody: pay attention to security (broadly) or there could be no exit at the end of the road of your startup.
Hehe, ISDN was the reason I started out on SuSE Linux. After a few years I tried installing Debian, but I managed to render the system unbootable trying to get it to work.

Man, ISDN was a pain. But it was nice to be able to see a log of incoming (including missed) calls in the log file. ;-)

(By comparison, Wifi via NetworkManager has pretty much "justed worked" for me.)
Home rating app
Well, at least Linux is not to blame for that. Or so I hope. °^_^
> Imagine if university science departments switched to 1940s curriculum just for fun.

My university physics curriculum was pretty much all around in the 1940s (classical mechanics, quantum mechanics, electromagnetism, special and general relativity, etc.)

I'm currently in a computer science department where the curriculum includes a bunch of stuff like Cassandra, Mongo, Javascript, Unity, etc.

I think it would be good for those of us in computing to take more notice of our field's past (even by the 1940s we had lambda calculus, combinatory logic, etc.)
There is still Trinity

https://www.trinitydesktop.org/
Making sure nobody can screenshot a snap or save it is an entirely client side programming problem, it's got nothing to do with cryptography, so all the other 'easy to use, private solutions' wouldn't be any different in that respect.
> I wasn't extremely supportive of the interviewee once he turned slightly sarcastic and rattled off hexadecimal bytes instead of just saying "SYN" and "ACK," though.

His response:

> in hexadecimal: 0x02, 0x12, 0x10 – literally "synchronize" and "acknowledge".

What do you think SYN and ACK stand for? Could it be "synchronize" and "acknowledge"? Moreover his point that knowing the bytes is more useful when you're looking at packet dumps is valid.
Please do, the node reboot logic has been through a lot of incremental fixes over time and we are always working hard to iron out the wrinkles that are left.

If you don't have time to interactively debug with us on IRC just open a Github issue with what details you can and the output of the `flynn-host collect-debug-info` command and hopefully we will be able to discern what went wrong.

Thanks for trying out Flynn!
That's a big claim. Can you share some of the actual wording of the questions?
But regarding its philosophical implications, being a simulated person is a lot like being a person someone else dreamed up.
> Most of my code now is structured as tables, which greatly simplifies many transformations. There is no pressing need for typing tables, and anyway most of these type systems really suck at "tables transformation algebra".

What do you mean by "tables"? I think of a database table of rows/columns, or a matrix.
Cookie Law Frequently Asked Questions
James Galbraith vs. Yaron Brook on Inequality
I understand your point, and perhaps we don't actually disagree on this. As an example, in Haskell (which you have shown in another comment that you are familiar with), this function would perhaps best be written as

sum_and_stringify :: (Show a, Monoid a, Foldable t) => t a -> String
sum_and_stringify = show . foldl mappend mempty

In this case there are additional rules (semantics, though not in the language) which we associate with monoids like associativity that don't apply to all "addables" (e.g. strings), that might make us feel more comfortable being so general. I think really it's just that we have more expressive language to describe our expectations. Though there's nothing stopping you from making String an instance of Monoid, or most any type for that matter, and producing nonsense. It's not a type error, so I say it's (in this case) not the job of the type system. But there are more expressive type systems that could let you guarantee these additional properties like associativity and turn nonsense into type errors, and I for one am all for that.

In the case of Python, though, coming from no static type system or verification at all, I would only ask of this tool to turn runtime checks (type errors caused by arguments lacking __iter__ or __add__) into static checks. Anything on top of that would be fantastic, I agree with you on that, but I wouldn't ask for or expect it.

Finally, thanks for all your comments - I appreciate the discussion.
Well the browser must be able to visit http://127.0.0.1 whats so different about that than https://192.168.1.1 or any other address?

Its only in combination with DNS that a browser can be tricked into sending requests where it didnt intend - but thats a problem of DNS.

So libnss or whatever library the browser uses sees lists.gnu.org and resolves that to 208.118.235.17 so browser initiates connection to that IP, but on subsequent requests, the name lists.gnu.org is changed to 127.0.0.1, how would a web-browser notice this, shouldnt the dns-library warn about this or just use a cache?

In any case, you can prevent it like this

iptables -A OUTPUT -d 127.0.0.0/8 -p tcp -m owner --uid-owner $YOUR_USER_ID_OF_BROWSER -m tcp -j REJECT --reject-with-tcp-reset

that is, if you run the browser under its own uid.
Google typically recruits people from Europe in European offices, and the same goes for offices in Asia, etc. The H-1B process is so painful that they do everything to avoid it, and only resort to it if they cannot find the candidates they are looking for in the US (which happens often on the scale of a company as big as Google).

Some people responded saying that they might still do this to get underpaid employees from abroad... which is just silly. The salaries are exactly the same whatever your country of origin, and companies like Google are not the ones you should attack if you want to make a point about H-1B abuse.
What to Expect from Linux in 2017: IPv6, High Scalability
How to Find a Programming Job You Won't Hate
Well the .NET CLR was designed by a lisper.
But this is not a case of a webpage on the internet having access to your localhost, its your local process which access local host!
But people do restore classic cars, for fun.
20 years, long time. The current children don't know what is DOS or UNIX.
"ipcin" and "ipcout" then?
Does Life teach me anything at 25?
It really doesn't matter what Verizon believes about who did the breach. Say you want to buy my car, but then it gets destroyed, and I say Superman did it. Whether you believe me or not, it doesn't matter, you still won't buy a destroyed car.

This is somewhat different from Yahoo users' perspective: in their case, as well, the point is not if the breach was state-sponsored, the point is: did it take mass destruction weapons and hundreds of spies coordinated for months, or did it take five minutes and a hairpin?
Not the browsers, the dns library. Protect any application.
Well with stronger type guarantees, a lot of the "test" part of that loop gets pushed into "compile".

Indeed the core loop becomes edit-typecheck, and while the compiler can be slow, the type checker tends to be a lot faster than the test suite.
Another good resource (compiled by Nobel Laureate Gerard 't Hooft): http://www.staff.science.uu.nl/~gadda001/goodtheorist/
There was that one time when posters from the Syria general thread helped by looking up images on google earth and had an artillery strike directed.