skysight-inc/HackerNews huggingface dataset:
Neat. I use it for things like linesearch and regularization (in optimization),

https://github.com/matlisp/matlisp-optimization/blob/master/...

As a fellow Indian lisper, are you by any chance using CL for work ?

Last I heard, the only big CL shop, cleartrip, moved all their codebase to Ocaml.
Une foire dédiée aux terrains constructibles en région francilienne
10 Rules isn't going to cut it really, its a lot more detailed than that. Here is the Spark reference manual (a standard for Ada that has been the industrial standard for decades): http://docs.adacore.com/spark2014-docs/html/lrm/
hopefully they hold a general election and Mrs May can continue doing her good work unimpeded for the foreseeable future. You may haggle on the terms of a "clear majority" on the referendum but there is no mistaking the majority the tories currently have over their opponents.
> but it's still pretty damn ultra-reliable piece of software.

Are you sure?

http://arstechnica.com/security/2016/09/linux-kernel-securit...

http://www.cvedetails.com/product/47/Linux-Linux-Kernel.html...
Concurrency means you can't prevent errors. Every time you open a file, it could have been deleted out from underneath you, in a race with some other process.

Most files a program opens are not as a result of user action: configuration, libraries, resources, etc. And usually it doesn't make sense to catch these errors at the point of occurrence, because they'll be all over the codebase. And there's very little you can do in response to them.
Bilt partners with Vinculum to accelerate growth
> Must confess that 10 years ago I lost around 5 years in deep linux setup & programming, and I know all that you say.

I am afraid you'll find the Linux of today is much different than a decade ago.

In regards to known working laptops, you mean something like this[1], this[2], this[3] or this[4] ?

Also you can just buy from [5] or [6] and have Linux preinstalled with all the correct drivers.

[1] - https://wiki.archlinux.org/index.php/Category:Laptops
[2] - https://wiki.archlinux.org/index.php/Dell_XPS_13_(2016)#XPS_...
[3] - https://wiki.archlinux.org/index.php/HP_Spectre_x360_ap012dx
[4] - https://wiki.archlinux.org/index.php/MacBook
[5] - https://system76.com/laptops
[6] - https://www.entroware.com/store/laptops

And honestly you can just ask the community on Reddit/IRC/Distroo forums etc. about their experience with the model you want to buy, is that really a problem if you're a "Pro" user spending serious money on the machine?

It honestly just looks like you're too lazy to look.
Or maybe you just made up your mind and refuse to budge even when provided evidence to the contrary - I honestly do not understand why you engage in a discussion then, you've already made up your mind.
Apple, doesn't want to enter into Freeimum Cloud competition. Hence They dont want to store 1 Billion Active iOS Devices's Photo for free.

But I think Apple should have packaged a better deal. Or Heck they should have worked with Carrier to allow people to sign up to iCloud Storage as option on their iPhone monthly contract.

Or the current iPhone upgrade program where you get a new iPhone every year, should be an Apple as a Services packaged with Apple music, Apple Care, iPhone etc.

And by the way, even 500M users with free 50GB storage is
25 EB. That is roughly 100 BlackBlaze.
Will there be a 2016 version?
Apart from that, TCO destroys information that is valuable for debugging (especially for non-recursive tail calls), exactly what you want to avoid in safety-critical software.
What if it can't harm your data, or data passing through your system?

What if it can't harm anything.
Forgive me for speculating, but given your username (diegoloop) and the name of the developer of that app (Diego Lopez), it kinda feels like you're promoting your own app.

If that's the case, you should definitely disclose that rather than pretending to be just a user of the app.
Clinton, Trump on Tech Issues
How Certbot and Letsencrypt Work (DNS and SNI-TLS
This article promotes the fail-fast approach, something I very much dislike (against popular opinion it seems).

I'm very much in favor of the opposite approach, defensive coding. Often when I read opinion pieces about how bad defensive coding is, they almost always seem to forget that defensive coding without proper logging, error-handling and monitoring is NOT defensive coding.
It is extremely dangerous to just detect error conditions without any feedback: you have no idea what is going on in your system!

IMHO properly applied defensive coding, works as follows:

* Detect inconsistent situations (e.g. in a method, expected an object as input argument, but got a null)

* Log this as an error and provides feedback to the caller of the method that the operation failed (e.g. through an error callback).

* The caller can then do anything to recover, (e.g. reset a state, or move to some sort of error state, close a file or connection, etc.).

* The caller should then also provide feedback to its caller, etc. etc.

This programming methodology gives the following advantages:

* You are made to think about the different problems that can occur and how you should recover them (or not)

* Highly semantic feedback about what is going wrong when an issue occurs; this makes it very easy to pinpoint issues and fix them

* Server application keeps on running to handle other requests, or can be gracefully shut down.

* Client side application UIs don’t break, user is kept in the loop about what is happening

Of course you will need to keep a safety net to catch uncaught exceptions, properly logging and monitoring them (and restart your application if relevant)

The fail-fast approach, as I have seen it applied, doesn’t do any checking or mitigation, with the effect that:

- you are thrown out of you normal execution path, losing a lot of context to do any mitigation (close a file, close a connection, tell a caller something went wrong)

- you only get a stack trace from which it can be hard to figure out what went wrong

- there can be big impact on user experience : UIs can stop working, servers that stop responding (for all users).

I have very good experiences with using the defensive coding paradigm, but it takes more work to do it right; for many, especially in the
communities that use dynamic typing, such as the JS community, this seems to be a too big a hurdle to take. This is unfortunate
because it IMO it could greatly improve software quality.

Any feedback is welcome!

(Edit: formatting to improve readability)
(Edit: clarified defensive coding as an opposite approach to fail-fast)
Combine this with any form of endurance exercise to build red muscle for maximum benefits.

It's been shown¹ that red muscle takes away kynurene, which is produced by stress, can enter the brain, and appears to be able to trigger depression and other mental health issues if it is at elevated levels for longer periods:

> “Our initial research hypothesis was that trained muscle would produce a substance with beneficial effects on the brain. We actually found the opposite: well-trained muscle produces an enzyme that purges the body of harmful substances. So in this context the muscle’s function is reminiscent of that of the kidney or the liver,” says Jorge Ruas, principal investigator at the Department of Physiology and Pharmacology, Karolinska Institutet.

> The researchers discovered that mice with higher levels of PGC-1a1 in muscle also had higher levels of enzymes called KAT. KATs convert a substance formed during stress (kynurenine) into kynurenic acid, a substance that is not able to pass from the blood to the brain. The exact function of kynurenine is not known, but high levels of kynurenine can be measured in patients with mental illness.

Recently the same research group also discovered that kynurenic acid turns white fat (the unhealthy type) into beige fat (more similar to brown fat, which is healthier).

¹ http://ki.se/en/news/how-physical-exercise-protects-the-brai...
Could one write a state machine running the code? VMs do.
Why would we need fairness ? They financed and created the internet, they can have at least a TLD.
I'm always online when I work, so I dream about a different beast. I want a thin client that interface to a beast of a machine in the server room. I means I can work in my office with multiple screens, or I can sit in a sofa at home, or at my home setup. All with the same machine just a different interfaces. That way I don't need power in a laptop, I just need reasonable connectivity.

I know not all workloads can work this way, but a lot of it can.
Speaking of Red Bull, how has someone not come out with a cheaper alternative in the US.

Not talking about other energy drinks. Korea has Hot 6ix, which is way cheaper and goes for the Red Bull taste.
unlikely, it barely covers the head
Anyone knows which year has the best scribe notes?
Yeah, the point of these rules (and the 31 JPL rules) is concision. Your programmers will read a 10 page coding standard, and might remember it. Nobody is going to remember hundreds of rules and hundreds of pages. They won't even read it.

In his talks Holzmann always makes the point that a coding standard is a hard sell for most people, and JPL hadn't had any success until they could come up with something simple and concise.
There's also the risk that the drug is not as efficient as expected, and you end up with an unwanted pregnancy, so participating in this trial is never a no-brainer.
Am I going crazy, or is this the third time I've seen this posted over the past few days?

No, apparently not...

https://news.ycombinator.com/item?id=12862428
https://news.ycombinator.com/item?id=12853531
This strategy also doesn't work well for women.
> Try and log, if you can't, fail silently without impacting the main purpose of the application/service/whatever.

Are you being serious? I agree that there can be "some kind of ancillary function that is non-essential" but in the case of failed logging you should try sending an email / showing some warning if you have a GUI / try other outputs / crash with a meaningful error especially if you are running under some sort of supervisor... etc.

Of course that doesn't invalidate your main point.
I know you think 'BDSM' is humorous, but many work-filters and conservative users will not. I suggest you re-think the name.

Personally, I sniggered, but then I'm not easily offended.
Chat Bots and TV Shows-Big Boss Bot
Knippex might fit the bill.
You need excellent communication skills to become an excellent coder.

You need to clearly describe bugs for other developers, write documentation, explain why a particular technology / framework / pattern is the best choice, understand what a client / product manager is wanting... the list goes on. Eventually, you will hopefully be training and supporting other developers.

How much of your time will be spent coding and how much will be spent communicating with others about your code?
job ads are wish lists. if you show up ticking all minimum requirements and preferred qualifications, they first thing they'll wonder about is whether you're not blatantly overqualified.

its always expected that you "grow into" the requirements somewhat.
Commitment to the truth. You have to successfully lie to yourself to pull off what GP described.
It seems as though the instructor expects a compiled pdf, so maybe it's a more theoretical course?

http://courses.csail.mit.edu/6.851/spring14/hmwk.html
thanks, can you point out any specific ones. I tried finding but didn't find any obvious ones.
How Russia’s New Facial Recognition App Could End Anonymity
That seems a bit low. Here in London it's a waiter's salary.
I pretty much taught myself CSS fixing fucked-up shit I didn't like on sites I was visiting, through Stylebot and (now) Stylish.

Stylebot is slightly easier to get started with, but Stylish is a better and more powerful tool, also available for Firefox.

I haven't got into JS yet.

Otherwise, installing GS scripts or Stylish themes works.
If I go through a tough time where anxiety is already impairing my life, sleep, communication then my first aid method is concious breathing twice a day for five minutes. It works immediately and levels down my stress significantly after about three days.

You breathe slowly in for about 15 seconds, hold breath for about 10 seconds and breathe out for about 35 seconds - mileage may vary. For five minutes.

The impact is not as fundamental and profound as with dedicated daily meditation but it does the trick and actually builds the basis required for actually sitting down and doing more subtle mental work.

Cheers
Fundamental Techniques in Handling People
What happened to userscripts.org?
anyone know of an app that can detect these signals?

Maybe decode them.

easiest way to block them is to know they are there in the first place.

i am suspicious that occasionally my laptop makes high pitch noise correlated to mouse movements when its running windows 10.

edit:Thinking about it. seems possible that might actually be facebook. never installed their phone app untill i had android 6 because it wants mic permissions (disabled) and facebook and reading hn is about all i use win 10 on the laptop for.
"Legible" is a funny way to misspell "perfectly representative of the artist's unique and precious vision".
I think those devices are wasted running a full OS stack for a single purpose, better have a nice baremetal runtime, unikernel style.

The problem being that for most use cases, for the price many of these boards cost, the majority will just go with the Linux option and install something like Yocto.
The ablity to sterilise people with a pill/injection is a fairly scary prospect.
See also my write-up on Dr. Holzmann's presentation at USENIX Hot Topics in System Dependability mini-conf 2012,
http://www.verticalsysadmin.com/making_robust_software/ and the full presentation video at https://www.usenix.org/conference/hotdep12/workshop-program/...
That's a great teach
So you're saying that we should clone him ? Or clone top(10) maths/psychs/brain-surgeon/etc ?
I don't mind installing apps if it's something I care about. Medium is a great (counter-)example. I wanted to leave a comment on mobile. You can't unless you use their app. No thanks.

I have an app that pays for parking in my city. It's pretty decent and I'm happy with it. If I go to another city once in a while, I'm likely not going to download a different app to pay for parking there. Or if I visit a furniture store for something once, I really don't want their app. And so on.
How to Fake It So No One Notices
All scribe notes in one PDF:

http://courses.csail.mit.edu/6.851/spring14/scribe/2012scrib...

--

Playlist (2012 lectures from MIT OpenCourseWare):

https://www.youtube.com/watch?v=T0yzrZL1py0&list=PLUl4u3cNGP...
much obliged
That was the title I saw as well since I had NPR in my news feed. I removed it now. There is just so much of this SJW post realism disregard for facts that I can take just because they decided to push some Alt Left agenda.

It's a pity because some years ago NPR used to be a balanced and excellent source of news.
Final decision on unsigned/signed argument in C/C++
I've seen this debate everywhere I go, and it never gets resolved. There are performance arguments, design by contract ones, readability etc.
I feel the sheer amount of manhours spent arguing over which direction to take is magnitudes higher than the actual effort to find and fix bugs created if you take any approach.
The common consensus is to always use signed unless

- you have a bitmask

- you want correct shifting behavior

The arguments for unsigned are

- you get a better readability and design by contract

- they are considered quicker in most cases (there are also cases where signed is better)

So can't we all agree that we should use signed just to not have different APIs, and in the mythical "performance critical" code we use unsigned where appropriate, but just leave comments (surprisingly, the amount of real performance critical code is actually a really low % so this is an acceptable tradeoff)
But the supply is not "lost". It did not disappear in space.
The integrations with Pandora, Yelp and Snapchat seem to be interesting. Most of the traditional big companies don't want to allow other companies to get a portion of their traffic. It's good to see that Uber would rather focus on what they do the best and integrate interesting features of the other apps.
Apple iPhone Grabs 104% of Smartphone Industry Profit in Q3
What have you guys been using to track requirements? I had a bad experience adapting Redmine for a project, and wouldn't want to repeat that in a next project.
This is more or less the same way SimilarWeb collects its data, so I wonder when will they start being treated the same. They operate a number of inhouse extensions and partner with other extension developers to collect the entire click trail of the users. Internal links in your intranet, localhost, "private" google drive links, all is collected and sold. It's beyond me how this shady business is treated as legitimate, including major web and tech publications citing their data reports.
If #a82a33 takes ten seconds to load and everything is invisible until it does, you're absolutely right I'm happy with red!
Agreed.

Everyone calls themselves pros, but nobody wants to get their hands dirty with Linux. Basically everyone's a pro-sumer.

When I go to the mechanic he doesn't care if the tools get him dirty, he uses the best tools for the job, not for his clothes. I get that some people want to look at gorgeous UIs but nobody told me how that gets the work done.

I want to use the best tool, and I try to define best as objectively as possible. Faster CPUs is better. Native support for docker is better. Walled garden is worse. macOs is better if you do ios apps. UI look&feel is debatable. Preference on terminal emulator is debatable. More memory is better. If you do devops and ssh onto linux boxes, linux is better. etc.
Why can't we share fonts between websites? I.e., put fonts on some shared CDN, and link to them directly. It could be similar to how different programs share code through shared-object files :)

A similar effect will probably be achieved with IPFS, where objects are stored by their hashes.
Firefox’s tracking protection is preventing the “Get Early Access” button from working, just putting this warning into the console:

> The resource at “https://mc.us14.list-manage.com/subscribe/form-settings?u=0d... was blocked because tracking protection is enabled.[Learn More]
Quantities may be limited but ESP32 boards are "here." Bare modules are a little under $10.

https://www.adafruit.com/products/3320

https://www.adafruit.com/product/3269

https://www.sparkfun.com/products/13907
Try/catch is not async and exceptions do not bubble up through the async context, which makes sense as the caller moved on with execution. Try this in your console:

try {
console.log("see, ");
setTimeout(() => {throw new Error("oops")}, 100);
console.log(
"I can't assume here that"
+ " the prev. line succeeded"
);
} catch(e) {
console.log("error!");
}
True... Without Linux, the projects are generally sensors, relays, LEDs. With Linux, "smart" displays, USB webcams, OpenCV.
GitHub has lost its legacy
I work on software that goes to space. I believe we and NASA use the MISRA coding standard, which is effectively this but taken to extremes. If you actually want to create safety critical code I would recommend that you familiarize yourself with the MISRA ruleset and DO-178B.
Of course not, you are so obsessed with your perspective, you didn't see what I said. I told we should study these guys , how they think , how they improve their performance, to achieve their success formula.

I cannot understand how in earth you infer from that to cloning them.
Countdown to Black Friday and Cyber Monday
I'm surprised such an in-depth article doesn't even mention promises. Upcoming async/await (already available via transpilation) will make error handling in Node sane again.
Are any of those safety guarantees important to a crypto project, though? Even heartbleed wasn't a "buffer overrun" in the memory safety sense of that word: the client was asking for and receiving the contents of memory that the server had every right, from a safety standpoint, to read from.
Interesting that he mentions Bret Victor. He was actually one of the designers of the much criticised touch bar [1][2]. He is also working on some other changes for Apple.

[1] https://twitter.com/worrydream/status/791767756928462848

[2] https://twitter.com/worrydream/status/793501918790242304
> Google needs to actively monitor all extensions for ad injection and tracking code (where are their AI experts on that?)

All the AI experts in the world won't be able to solve the halting problem. What you're asking for is impossible.
The past.
Such innovation .. pure evil.

What's the takeaway? Not to install any browser add-on?

On a serious note, I guess that it might be safer to to run a browser in a Docker container and use one instance to browser only site. The question is that how feasible it would be?
Sure, you can see some projects here (all pinned projects are mine): http://github.com/franciscop/ or in my needs-to-be-updated website http://francisco.io/

But it highly depends on the kind of project, I will start in Toptal soon so money is not such a big motivator as it is the kind of project/things to learn/tech.
Nah, not using CL for work these days :-(

I used to work at Cleartrip a long time back, before they moved off Lisp.
I came to the conclusion that one should use only addons which are widely used by netsec experts, because audit is a fairly rare thing these days and one has to rely on when somebody sees something suspicious.
Even more so if you consider that the SSD likely has a more powerful processor than the VoCore.
Rules like avoiding recursion and loop upper bounds are partly justified by helping code analyzers to prove executions are bounded.

Does anyone have experience performing formal static analysis on code? And if so, are there any open-source examples of the state-of-the-art tools being used on nontrivial problems?

I've been looking at this recently, but I've never seen a proof of reasonably standard function like, say, printf. Most of the attempts at formal proof I've seen seem quite complex for very simple functions [1] and the next step up seems too complicated for me to follow [2]. I'm familiar with heuristic-based tools like clang analyser, coverity and flexelint - but none of those claim to produce any sort of proof. I'm also aware of MISRA but again, that doesn't claim to provide any sort of proof.

Those of you who are using formal methods: Is what I've seen really the state of the art? Or are there powerful tools I've overlooked?

[1] https://github.com/Beatgodes/klibc_framac_wp/blob/master/src...
[2] https://github.com/seL4/l4v/blob/master/lib/Monad_WP/Strengt...
Ah; thanks!

I've been trying to find them on the site to no avail.
I second this. When I am under stress, the caffeine heightens the feeling of anxiety and on really stressful days, I can feel my heart pounding...
We're great, you don't understand competition law, Google tells Europe
You most probably have some "coil whine"[1]. It's very unlikely that you are hearing ultrasonic signals (disclaimer: I'm no expert).

[1]: https://en.wikipedia.org/wiki/Coil_noise
For example you don't have access to production servers and work only with dev/staging environments
MongoHQ/Compose: Sandbox Retirement
We use DOORS. I don't have experience with other tools, so I can't compare but I don't find it a nice experience either.
And one more: https://codepen.io/dredmorbius/pres/KpMqqB