skysight-inc/HackerNews huggingface dataset:
The article appears to assume what it is asserting about TDD (Test Driven Development):

Of course, this is a fictional example making a lot of assumptions. Your mileage will vary based on lots of factors, including your team’s experience with TDD, the presence or absence of other quality measures (such as code review), etc…

Here are the assumptions made:

Production bugs without TDD: 100
Production bugs with TDD: 40 (60% fewer, middle ground between 40% — 80%)
Average time to fix bug at implementation (TDD) phase: 1 hour (this number is only used to derive the production bug fix cost)
Average time to fix a production bug: ~15 hours

The author does try to justify this by saying:

The relative results of this fictional example ring true to me based on my experience with real production projects, both with and without TDD.

BUT...

Where is the specific data and how representative is the author's experience of all or most software development?

Software development is enormously varied. Kent Beck initially hawked TDD based on a project to rewrite Chrysler's payroll system that was cancelled.

https://en.wikipedia.org/wiki/Chrysler_Comprehensive_Compens...

Also see:

https://stackoverflow.com/questions/10149798/how-tdd-is-rela...

The Chrysler C3 project is not the most convincing argument for TDD or other of Beck's ideas. But even assuming the C3 project was a roaring success -- a highly debatable proposition, one should ask how applicable the results are to many other quite different types of software projects.

Similarly, what is the author of this article's actual experience and how applicable is it to other types of software projects?

I don't question that automated tests can be helpful and indeed critical in some projects but I do question rigid orthodoxies like TDD or requiring unit tests for every function or class after implementation (many people promote unit tests everywhere while claiming they are not doing TDD).

Tests take additional time to design and implement and thus cost more. They also have maintenance costs. Architectural and other changes in the software as it is developed can and do result in revising or rewriting the tests as well.

Many successful software projects were designed and implemented in the 1970's, 1980's, 1990's, and even today without TDD and without unit tests -- or code reviews although I am focusing here on TDD and unit tests.
How is using semver casual? In AngularJS they introduced breaking changes a number of times, without a major version bump. Using semver makes it really clear, and since they are being so strict about it, there is greater confidence when updating to non-major releases. I think this is great.

Their 6 month release cycle is also very smart and allows for planning. I know that I'm only ever going to need to fix things once every 6 months when updating the library (if I do choose to update it) which seems pretty good to me.
Yup, that's the guy.
I don't think any of the desktop APUs support ECC though (e.g. FM2, FM2+) (information on this is terribly hard to find).
They all support ec2 (as per the linked article).
Well... just thinking out loud:

It's an impedance mismatch with every programming language I personally know, which all permit the empty string. Even Erlang or Haskell, with their oddball strings that are actually lists, permit an empty/null list for this purpose. What might they be? Maybe it's a blank line from an array of chomped input lines, maybe it's a base case of a recursive operation (see also: you can't have an empty set, possibly related, maybe DynamoDB stores strings as lists...).

The point is, sometimes we have the empty string as a legitimate scalar value, so rejecting them creates extra work for the developer and feels like a POLA* violation, even if there's a solid underlying technical reason why it is so (and maybe there is, maybe it's due to a Merkle tree for the values, as suggested in the predecessor Dynamo's original paper). It's the kind of thing that leads people to develop wrappers for things that really shouldn't need them, which is a gateway drug into all sorts of unnecessary abstractions and extra work.

At the other end of the spectrum I've seen some hilaribad JSON structures, ones where a value might be absent, or null, or the empty string, or a real string, and these four things all have different meanings /o\.

* Principle of Least Astonishment.
Just enough to keep going, but not enough to mass produce new chips without an order and cash from an OEM in hand.
http://ask.metafilter.com/47835/Woz-More-like-Was-am-I-rite

A not so nice question was asked about Woz. He responded.

http://ask.metafilter.com/47835/Woz-More-like-Was-am-I-rite#...
The spleen, the strange little organ that can multiply
Academic Writing : The battle between precision and TL;DR
For those who are interested, Schelling's work was also foundational to David Friedman's (son of Milton) work on libertarian anarchist theory.

From the conclusion of http://www.daviddfriedman.com/Academic/Property/Property.htm...

"The central project of this essay has been to give an account of rights, especially property rights, that is both amoral and alegal—an account that would explain the sort of behavior we associate with rights even in a world lacking law, law enforcement, and feelings of moral obligation.[28] I have tried first to explain how, with no legal system to enforce contracts, it might still be possible to contract out of a Hobbesian state of nature, and then to show how the same analysis can be used to understand in what sense a civil order, such as our own society, is different from a Hobbesian state of nature. Having offered answers to those questions, I then tried to show how we might get from the state of nature to something like the present society, and to use the analysis to partially explain the puzzling similarity between actual rules, just rules, and efficient rules.

If my analysis is correct, civil order is an elaborate Schelling point, maintained by the same forces that maintain simpler Schelling points in a state of nature. Property ownership[29] is alterable by contract because Schelling points are altered by the making of contracts. Legal rules are in large part a superstructure erected upon an underlying structure of self-enforcing rights."
I'm also thankful for people like you, Walter. But I know what you mean.
The problem is that in fact half the US population interprets Trump the way he intends. You and I belong to the other half, and we are puzzled by his non-literalness.

Apparently for the last 8 years the opposite was happening, you and I had a president that spoke "our language", while the other half of the US kept misreading him.

I don't know what to do about this except to try to listen to the other side and understand them the way they intend to be understood.
It's all wasted ink and pointless flapping of gums until a tech magazine gets their hands on a production model with a set in stone RRP, and does third-party benchmarks. You can't eyeball the actual performance from the marketing material, and neither can anandtech.
I wrote a whole book in this style. https://www.indiegogo.com/projects/the-ultimate-growth-hacki...
It's like I'm in /r/hailcorporate. I'm struggling to believe that anyone seriously thinks Apple have set up an astroturfing program in Hacker News to improve the reputation of the MBP. Of course they haven't. Not everything is a conspiracy theory.
No one outside of the software provider can audited the code, and presumably even they haven't audited the code. Recently there was the source code backdoor that was suspected to had been placed inside Juniper routers by the NSA. If I remember correctly, it wasn't found because it was hidden on a high right column.
> it turns out that users who are forced to change their passwords frequently pick worse passwords

I can vouch for this. My rotating password at work is _______1, followed by _______2, then _______3, and so on. If a year-old hash gets cracked, it won’t take a rocket scientist to know that the password right now is _______4.
As I said, Google/Facebook data may already have been used in Obama's deportations. No one knows either way. So the pledge can have zero effect.

The real problem is the existence of the databases, and government access to them. Both of those things are facts right now. The pledge ignores that.
I can't stand Skype's sign in/closing experience. Linking my original Skype account with a Microsoft email definitely broke something. Also why do I have to tell it to exit in 3 different ways to get it to finally exit for real!?
How Russian Cyberpower Invaded the U.S
Wouldn't it encourage people to write down their passwords and leave them in plain sight? Increasing shared passwords within an office space?
Yes, Scorpio might possibly include Zen cores. AMD has on multiple occasions stated that one of their design goals has been to design a core than can scale from ultra power efficient embedded applications all the way to high performance. I think their motivation is to consolidate all their efforts into one core.

Now I don't think they will be able to fit 8 zen cores into a Xbox SoC especially since the Vega GPU also have to fit in there, but quad core with 4 logical cores would still probably be better than the existing Puma cores.
As a software engineer, I would argue that my liberal arts education is one of my greatest assets.
There is a .zip you can download, and a link to give it access to your Twitter account. That's enough to make me think it's legitimate :) If you are brave enough to go through either of the steps, let me know what's at the end of the rainbow.
The license.
Yup oculus is a failure. Smart man not to have his name tainted by a soon to implode venture; good move Iribe.
Sorta like how your keys are always in the last place you look. Everything before good enough is an error. Good enough is good enough. This is engineering.
A sticky note is very secure against remote attackers.
Now I get to write 'Angular > 1' all the time.
The lightning port adapter comes with the phone.
Can you explain those numbers? 7-12% of what? Are you suggesting that rate limiting reduces call volumes by a little more than half compared to lockouts? Where did you get the data?
New regions seem to be announced well ahead of time [0] though I'm not sure how far in advance. I think I recall seeing the London region months ago.

[0]: https://aws.amazon.com/about-aws/global-infrastructure/
The fundamental problem with both the Vive and Rift is resolution. If resolution was there, it would be an entirely different experience because you could work inside the Rift.
Until this is fixed, it's just a niche.
I too was sad to see Chandler die as well. It looks like the source was imported into github:

https://github.com/owenmorris/chandler
https://github.com/owenmorris/chandler2
You can filter for this:

Take a database of games from pro players; Take the set of all moves where Stockfish-5 agrees that the move actually played is the optimum. Filter for all the moves where Stockfish-11 has a different opinion that results in a big gain in position. What you get is a list of moves that would surprise pro-players under time pressure.

I wouldn't be surprised if professional chess players are all running a version of this against individual known opponents before a tournament to probe for weaknesses.

A harder problem would be to cross-reference this final list with the post-game opinions published by professional commentators and identify major discrepancies. This would be the "wouldn't have thought of it in a million years" list.
At my publicly traded company I was told that they have to do password rotation because of Sarbanes Oxley. Is there any truth to that?
Indeed. This seems similar to my problem.

I started thinking about the streetlight problem decades ago in Portland, which has a grid in the city center. The specific question was what if I just always went with the green light to cross the grid? In the streetlight case this clearly leads to bad outcomes if the length of the red light time is unbounded. Your conditions would seem to limit the cost of a bad decision to the number of nodes you cross times the maximum height difference between west and east ends of the grid.

However, if you don't somehow limit the number of ups and downs between nodes, then the "take the downhill" algorithm seems to have the same issue as walking through streetlights. All you have to do is assume a large number of ups and downs within a block.

In both cases it seems that to bound the "sub-optimality" of solutions there must be a bound on the cost of moving between nodes in the grid.
If they haven't already started to rewrite the codebase, then I expect them to soon, or there is a medium-term plan to replace it with something else.
Correct Horse Battery Staple https://xkcd.com/936/
Tor at the Heart: Riseup.net
Oh no, an American attempted to participate in the American democratic political process by donating a modest amount to a group that "put up one insulting but fairly mild anti-Hillary Clinton billboard outside of Pittsburgh". Clearly he's anudda hitlah.
Is this backdoor-ready to comply with UK's recent tech laws?
Well Jaybirds have been out for years, and are pretty much the same thing with a wire around the neck, but also rather popular.

And actually the Dash was a kickstarter from two years ago which is the same as the Airpods, where each pod is separate with no wire at all. Started shipping a year ago.

People who know Apple are getting sick of them jumping on bandwagons' years late and claiming to be first.
The same got my attention too. A really great idea, though I'm not aware of it being used currently at all. It might be, but I've never come across/heard anyone mentioning it. Hopefully this takes root!

Actually, couldn't privacy-caring service providers also check current passwords against newly-leaked lists in case something pretty big gets disclosed and warn their affected users? Would probably take some time for services with big amount of users, but that would be some awesome help to users who use same passwords in most places.
Which is good enough in most cases. If an attack can walk in and physically tamper with you computer peripherals you generally have bigger problems.
That usually means the link was banned, since the default for when you submit a duplicate link is to redirect you to the discussion for that link.
On the surface it would seem not, but going by my usage, I think there's a difference. Since getting a 6+, my iPads go largely unused. There are 3 iPads in my house and my wife and I both regularly watch streaming content on our phones. I think it's because you tend to have your phone with you as you move from the kitchen to the couch to the home office to read/watch before bed, etc.

For DHH, I guess it's a combination of that and the fact that he doesn't want something as large as a 6+ in his pocket all the time.

But in terms of having the two devices, then little different. Obviously an affordable luxury given that many households would have phones and a tablet. I just hadn't thought of it being two different sizes of phone before.
Or you yourself submitted, deleted, and attempted to resubmit. (Personal experience.)
Ask HN: Will a B.S. in _Software Engineering_ hurt my chances for the Big N?
All of the Big N requirements say "Computer Science" B.S. needed. Is Software Engineer the same thing as Computer Science to corporations? Should I be wary of being pigeon-holed with a Software Engineering B.S.? Will it make no difference from an employment standpoint?

I ask this because I am a prospective 2nd Bachelor candidate at a California UC and they only offer Software Engineering as an option.

Thanks!
Can you blame them? Oculus & Facebook started acting like an abusive monopoly before they even had the monopoly.
any form of libertarianism != anarchism!

propertarianism is a libertarian philosophy
> Unless otherwise specified in the description of a given authenticator, the verifier SHALL effectively limit online attackers to 100 consecutive failed attempts on a single

I think that can be read two ways.

1) 100 failed attempts/account/month
2) 100 failed attempts/IP/account/month

The latter still limits an attacker but is less likely to be a plausible DoS against the account unless the attacker has compromised the legitimate user's machine at which point all is lost anyway. Later in the same section:

> When the subscriber successfully authenticates, the verifier SHOULD disregard any previous failed attempts from the same IP address.

Which suggests the failure count is per IP and not per account.
Yeah, and I made exactly that point, before you did, despite the troll. Comment history.
Maybe WeChat is not a clone?
I'd launch asap. you can't worry about that game.
There are reasons to be alarmed at the "throw stuff at the wall and see what sticks" approach.

Like perhaps you decide to use a product that they're not particularly interested in supporting very well, and a year later they decide to shutter the service which performs a crucial role in your environment...

I am not suggesting that Amazon is actually going to do this, but it's certainly more likely than, say, EC2 going away.
The idea is that the government wants its fair part of tax.

But considering how all collected data in the US somehow ends up being able to be accessed by any and all departments that want it...

How long before purchasing a watch, an Arduino and a gun will result in SWAT kicking in your door?
Do You Really Need DevOps?
As caf said, ASCII is a 7-bit encoding.

However, the question "which?" can still apply. There are many encodings that are a superset of ASCII. UTF-8 is a superset of ASCII, but so are ISO-8859-X (for any "X"), Windows-1252, and many others.
There's no way to make the case this person is trying to make.

It's also hypocritical to make this case now that the team with the branding they don't like is in power. This type of sanctioned prejudice has been going on for decades.

https://www.bis.doc.gov/index.php/forms-documents/regulation...

The best counterproposal I can offer is this:

"Don't do evil things, asshole."
Its like saying "Donald Trump could be Bigfoot" or "Hillary Clinton might be a space lizard"

Sure, lots of things could be lots of things, but this article offers nothing beyond completely pointless speculation, entirely bereft of substance. Yet, most people will see this as a fake indictment of Trump and/or Thiel.
They also have, as far as I'm aware, a pretty lousy battery life. They simply cannot be left in the ear all day; they'll need to be charged a couple times during the day.
I've found this library to be a great resource for getting implementations of a bunch of simple functions with no strings attached. PDCLib code has made it into most of my toy kernels and the KnightOS libc.
Except it doesn't help with that, at all.

Many people use predictable rotations (incrementing number, date appended), so if you know one, you know them all.

Also if they've shared it once, why would they not share it again? Put another way: why is making them regularly reset their password going to make them suddenly follow security protocol, when it didn't the last n times they had to change their password?

If the office thinks it's okay to share their password it's also a symptom of several things:

* Lax security environment, with not enough emphasis on security training and importance.

* Poor senior management. There should be reprimands for violating security rules, as severe as losing your job for repeat offenders, and obviously IT can't do this on their own.

* Bad work environment provided by IT. Why are they sharing passwords to begin with? Maybe the environment is overly locked-down with too many restrictions, or maybe the collaboration tools are just bad or missing.

Fix those, the password sharing stops.
Most businesses have management team that give lip service to workplace culture
But nobody's asking you to use any of these systems yet. they're in development, not products for sale. There's no benefit to anybody in questioning whether google knows that snow exists, or if uber understands that traffic stops unexpectedly sometimes. Obviously everybody involved in developing self-driving cars understands the most basic definition of the problem.

If google actually starts selling a self-driving car and doesn't give any information about whether it can deal with a policeman-controlled intersection, then you can be concerned. Until then, implying their self-driving car programs haven't considered the basic problems that any uninformed commenter on the internet can think up is not incredibly helpful.
Polymail for Education
> 4. ... limited educational resource and the amount of people who wants to use it

Is this really the case? I can't imagine a country having to limit educating students because of lack of resources. I hope they're not doing it artificially just to have a gradient.
can i have your old job? i've been in industry for last couple of years after finishing my phd, and my job feels futile and meaningless (btw yes i'm good at solving "business problems", but i feel pretty depressed/terrified if this is going to be my lasting contribution to the world)
I think that's unfair! It makes sense on first glance, right? People can't steal your password if it changes all the time.

I personally find it unintuitive to think that people would give up on the "memorization" part if it became "too hard". It's true, and we know this from study, but to say it's "dumb" is unfair.
I haven't used any VR besides my Oculus DK1, but I've recently heard that Vive is hands-down the best. Haven't heard anyone suggest that Oculus is competitive. I don't follow the VR community very closely. Would you say this sentiment is widely held?
Especially from 1997 to 2011.
A single application combining Spotify, Apple Music and iTunes' music libraries
> I am very happy to read these posts. It's not easy to have notoriety and pretty much have accurate conceptions in the public mind. Virtually everything said her about me is accurate.

And now I like the guy.
It's less about you sticking up for a product you enjoy, and more about the fact you've got basically 0 post history outside of defending a product that Apple has been scrambling to justify in the press.

Probably just a perfect storm... but you can't really fault people for being skeptical.
I prefer the passphrase: https://xkcd.com/936/

Also, I feel very funny using generated password from a website. If I need a new password, I can just generate one in Python or something.
No one I know uses Siri, by the way. I've literally never heard anyone in the office ask Siri a question. Never heard it in public, either. It's not really a thing outside of the tech bubble, I reckon.

I'm positive most people will still be using cheap wired headphones 3 years from now. If you're willing to lay money on it, I'll take any bet you offer.
Plants vs. Zombies Hack No Survey (Android+iOS)
To be fair Dan Abramov, who wrote Redux, repeatedly tells folks they don't need it: https://medium.com/@dan_abramov/you-might-not-need-redux-be4...

Unfortunately, the general sense from the community is that it's an essential piece of the React ecosystem.
AWS Whitepapers
Red China has only 1,488 naturalized foreign-born citizens.[0] But there are a lot more permanent residents than that. Those that marry Chinese will have children with citizenship.

[0] http://www.economist.com/news/briefing/21710264-worlds-risin...
There is no password policy that protects against rubber hose cryptanalysis.
Pyxl101, I find it surprising that your comment was downvoted. Typically people downvote for one of 2 reasons, either they disagree with your tone or they disagree with your facts, but in your case your tone seems reasonable and your facts seem accurate. It does seem unreasonable that people downvoted you.
Fantastic work on KnightOS! It has been a constant source of teachers complaining to me at school, because students are hacking away building programs to do all their work for them.

I couldn't be happier.
My Pebble Story