skysight-inc/HackerNews huggingface dataset:
Personally, I'm wary of ideas like software engineers facing unlimited personal liability like hardware engineers, because computer science just hasn't advanced to a point where we can say with confidence that any non-trivial piece of code works correctly (or even define what that means).

However, I do think there needs to be some serious financial penalties for companies like LG, Samsung, D-Link, etc., who ship flagrantly insecure firmware that in many cases is uneccessary, is almost never supported for anything like the realistic lifetime of the device, and where it is clear to anyone with industry expertise that they have demonstrated a negligent lack of basic competency.

For example, back in 2007 it might have been acceptable to store passwords as salted MD5. Nowadays, not good enough. Any hardware made competently then might have used a salted MD5 password store. Fine. But really, patches should be provided for at leat 10 years and those patches should bring firmware into line with the current state of the art. Thus I think it would be reasonable to sue a hardware manufacturer for a device made in 2007, still in service in 2017, which cannot be updated to have better password security than salted MD5.

It of course goes without saying that things like default passwords (admin:admin etc) should be considered outright unacceptable in any network-enabled consumer device.

Obviously we can't hold device manufacturers liable forever, nor can we expect NSA-proof levels of security, but I think it is reasonable to hold all hardware to a standard of "basic competency" for at least 10 years from the date of manufacture. The standard warranty period of 1-2 years is not sufficient.

There is at the moment a serious risk/reward imbalance where it makes financial sense to ship "features" (even if nobody asked for them) at the expense of security, because the subsequent issues are someone else's problem. This is bad for device owners and bad for society as a whole, since compromised devices are commonly used for DDOS attacks, sharing child porn, etc.

If device manufacturers knew there were serious financial consequences and that all features must be kept secure for 10+ years, they would certainly be more interested in making things modular and reducing potential attack surface areas than they are now.
Inside the 74181 ALU chip
It's not at all inconceivable someone is operating stealth aircraft in that region. Reagan was willing to share[1] with Britain stealth in '86, so perhaps 30 years later, it's easier to obtain and someone sold some to Chile or its neighbors. The US, Russia, and China all have it.

1. https://theaviationist.com/2017/01/02/in-1986-u-s-president-...
أغرب 10 العقوبات المدارس في العالم لن تصدق ماذا يفعلون لتلاميذهم
Yeah, and in every thread about the XPS, there's someone talking about their horrible experience with drivers and support, all the while saying "but the new ones look nice!".

Honestly I would love if everyone switched away from Mac. Apple (like Intel) is at their best when their back is against the wall. When they're running the show, they get lazy.
It's extremely easy to validate in automatic way that only proper call's are used to call the sprocs also if you limit web app db user to only have permission to execute appropriate stored procedures you mitigate a good number of attacks even if someone did call the sproc in unsafe manner that allows sql injection now the attacker needs to guess sproc names and signatures and still limited in what he/she can do. This assumes that sprocs are themselves not written to concat sql and then execute it :)
On several occasions I have been rather nearly killed by reckless drivers. In each instance I recorded the license plate number and phoned the police. In each instance the police said they could not be sure who was driving therefore could not even begin an inquiry.

In your quasianonymous utopia, which twin is to blame when one of them comes to my country and injures someone? Neither?
The website seems to be a blogspot blog on a custom subdomain...
My experience was to remove the daily standup. Best decision ever.
I wouldn’t call it homoiconic, but I’m working on a macro system which will let you manipulate terms as regular data structures at compile time. That was an early insight about Kitten—things are much easier to statically type if you differentiate data from code, and you can recover a lot of the flexibility with other approaches to metaprogramming.

In the old compiler, there was no FFI. In the new compiler, codegen isn’t done yet, but the Kitten ABI on x86-64 is similar enough to the System V ABI that you can just save some registers and do a regular call. As for the front-end, it’s been a long-standing goal to allow a programmer to just import C headers, rather than write or generate a bunch of tedious FFI declarations; I have a prototype implementation of this.

If you’re interested, shoot me an email (username@gmail) and we can find something for you to work on. There are many different things to do: adding features, improving error messages, polishing the interactive environment, writing tests and documentation, integrating with editors, you name it.
Isn't it too much to have this every day?

I've found that asking people every day incentivized them to write about anything and invent stuff just to fill up the question.
Aren't they all already tracked on the public ledger?

If governments move in, it's my understanding that it would be at the points of currency exchange.
This should be crowdsourced. The official data here in the "T" bus service area is unreliable. Crowdsourcing would also enable measuring real-world service performance.
As a side note, it's not always possible to use parameter binding for all parts of a SQL query. :(

For example, when querying user uploaded databases (not a typical use case), the SQL query needs to include the table name. At least with SQLite (unsure about PostgreSQL), table names can't be bound in a parameter. They need to be part of the non parameterised query string, thus string smashing.

Field/column names are probably similar too, though I haven't checked (yet).
16 Questions about Self Driving Cars
> Good programmers just don’t work for money

Say that to programmers in Wall Street see how it goes ;)
1) Supported by many claims and was linked to including verified phone calls.

2) http://www.spiegel.de/international/world/russia-wary-of-nat...

http://articles.latimes.com/2014/mar/04/opinion/la-oe-walker...

http://www.forbes.com/sites/dougbandow/2016/09/22/say-no-to-...

3)>"Gifted" because Khrushchev's transfer was ostensibly to mark the 300th anniversary of Ukraine's merger with the Russian empire. And he probably didn't think the Soviet Union would be gone less than 40 years later.

http://www.npr.org/sections/parallels/2014/02/27/283481587/c...

4) 2/3 of Crimeans are ethnically Russian, and Russians have been the predominant people in Crimea for 100 years
ASU experts study how firms can keep workers from following departing CEOs
Are we sure DJI is [only] a "drone manufacturer"?
Confirmed drone-aircraft collision
I'll try and dig my favorite debugging story up about all emails failing to send passed ~500 miles. That was pretty crazy near sorcery as well.
I really want Netsurf to succeed, and it thus remains my favorite out of principle. Hopefully it'll get better at rendering real-world web pages as it incorporates the ability to run Javascript (via Duktape), but even now it's pretty decent at handling non-JS websites.

Unfortunately, I find myself going back to Firefox time and time again. It's definitely my second-favorite, and probably my first-favorite in practice. The ability to stick all my browser tabs on the side of the browser window instead of the top (even if it requires an extension to do so) is a killer feature that absolutely none of the mainstream browsers (and very few of the non-mainstream ones) seem to offer in any way, shape, or form.

I used to really like Conkeror, and I still love the idea of a minimalist browser with Emacs keybindings, but it doesn't seem to be all that active anymore.
on the topic of lectures on creativity Richard Hamming gave a lecture at the naval research facility on creativity [1] (along with other topics, these recordings are often referenced as "Hamming on Hamming" lectures). This is my go to reference when I feel like I'm getting off track.

[1]: https://www.youtube.com/watch?v=FlTybZvds0U
You don't get it: Your js crap compiles to other js crap, yes, but this time your other js crap is BETTER than other peoples js crap who don't use Svelte because apparently downloading an executing 70 kb vue.min.js gzipped to 26 kb is just too much for the toasters people allegedly use to execute your TodoMVC application.
The problem is- you cant test against that- i mean, how should they detect ahead of update that they break things. Add a unittest function to every program on every system out there, and do a test-update with a opt-out?
What does it take to become a citizen of Norway? Asking for a friend.
2 Ways to Manage Your Greed Emotion in Trading
This is what I don't like about this whole "smart" era we're entering into. Now you buy a smart TV or a smart phone or any other "smart gadgets" and you don't even know if it will receive any security updates in 1 year. It's terrible.
What I want more than anything is a popular open protocol. I want to be able to choose between 10 different messaging apps on each of the platforms that I use and they all speak the same protocol.
I could also watch someone put in their code
No, actually I live in a block of flats/apartments. Up until a year ago I used to live in a block consisting only of studio apartments, so I had lots of neighbors, since then I've moved to a "fancier" area and to a one-bedroom apartment and I only have two other neighbors on my floor. I don't think I've ever seen a non-encrypted wifi connection among my neighbors for at least 3-4 years now.
True. I saw a few put to tears. A small handful washed out, too. 70-80 hour weeks of work, and harsh realities. It's not as easy as some think, depending on the school and program selected.
>This is a situation where C++ really shines

I agree but passing in the size is really not much of a deterrent.
You have this. It's called XMPP, and it's supported by well more than 10 different messaging apps on each major platform.
Someone recently posted a list of these.

http://beza1e1.tuxen.de/lore/
Do you perhaps mean http://www.ibiblio.org/harris/500milemail.html? :)
I think that's a neat idea. More specifically, I think they could have used it to replace this step:

> Today, the best strategy is often to make a best guess about where to fold the polygon — and then to get out scissors and tape to see if the estimate is right.

“Kathryn and I spent hours cutting out examples and gluing them ourselves,” DeMarco said.

My understanding is that that was something they did to get some intuition on where these folds occur, which would hopefully aid in spotting a pattern of some sort.

It seems like the critical thing is that there is some underlying pattern to where the folding lines occur, though—otherwise it's not really of theoretical interest. Something like this seems like their end goal:

> “Certain polynomials might have similar bending laminations, and that would tell us all these polynomials have something in common, even if on the surface they don’t look like they have anything in common,” Lindsey said.

And it seems like they have made some headway on understanding the underlying 'pattern':

> “Our working conjecture is that the folding lines, the bending laminations, can be completely described in terms of certain dynamical properties,”

But I bet if they'd taken your approach rather than manually cutting things out of paper, they'd have much better data for thinking about this.

(Although, looking closer at your proposed algorithm, I'm guessing it would need some modification: the folding shouldn't affect the MMEs—they have a curvature distribution derived from the MME already, but:

> If given a two-dimensional polygon, and told exactly how its curvature should be distributed, there’s still no mathematical way to identify exactly where you need to fold the polygon to end up with the right 3-D shape.

So I think the different folding schemes are independent of MME/curvature distribution.

Still, something along the lines of what you described might work...)

Edit: I should point out that I'm also not a mathematician :D
This is the correct way to do it. Being taught art would kill one's creativity and dull one's ideas. Therefore study maths, physics, computer science and all those tech things that underpin true art, i.e. the new stuff made in new(er) mediums.

I graduated with a tech degree and was able to freely move around the broadcast television and animation world, with a huge amount of creative input because I understood the problem space and the underlying tools.

I also had the confidence to branch out from 'engineer' to 'creative professional' able to be earning money for the companies I worked for due to this creative/tech crossover skillset, an 'engineer' is an expense, not a revenue earner under normal circumstances.

If I had wanted to work on the shows I worked on but had taken a traditional approach to getting there, then I would have had to have done an eternity of 'runner' jobs or have been born with the 'right' parents for nepotism to do it for me. But I found the tech avenue to be wide open, back then it was SGI machines and none of the runners were clamouring to read the SGI manuals. It wasn't important for me to 'mix with the stars' but I did very much enjoy working with a lot of different specialists all at the top of their game.
> The environment that nurtures creative programmers kills management and marketing types - and vice versa....

Misleading quote at best. That's only the first line of the article, written for thought provocation.

There isn't anything in the article that prevent management or marketing from working with programmers.
Security is not that much improved to be true.

Docker is just a fancy chroot, a motivated attacker can escape from it, it remains far less secure than a freebsd jail or a solaris zone.

Except maybe some somewhat safer compiled languages (rust, newer versions of C++), and a few interesting tools (like AFL), there was not much improvements in security mechanism in late years.

SELinux is still so annoying that it's commonly the first thing disabled in many install.

A large amount of sysadmins and developers still do a chmod -R 777, not fully understanding what there are doing.

And in the area of micro services, the traditional 3/4 tiers architecture can easily be replaced by a clusterfuck of containers deployed in a flat network where it's impossible to monitor what is speaking with what. And it's much easier to make a mistake like putting a database on the Internet with no authentication whatsoever...

What is more, because of containers, infrastructures tends to be far more diverse than ever: python, node, php, ruby, go, java, each with various version, from various distribution, with various libraries. Each of these environments must be properly monitored, but when you deal with thousands of containers, hundreds of technological stacks, with 3 or 4 versions for each layer, it becomes a nightmare.

In languages that encourage bundling, Java with war webapps for example, I've rarely seen developers properly monitor security issues of what they ship. Too often I've seen only opportunistic updates. And in some extreme cases I've seen products shipping version of libraries 10 or even 15 years old.
Containers being a way to generalize bundling, I don't see it being an improvement in that regard. Quite the contrary in fact.

However, to be completely honest, new tools like chef/puppet/containers and new methodologies like Infrastructure as Code somewhat helped to be less frighten about updates as it reduces the risk/impact of something breaking in the process, no more 'don't touch it, it will break comething'. Even containers can help in that regard, it's easier to do AB testing, avoid downtime or put servers in maintenance with them.

Fundamentally, some things are better, some things are worth, and in the end the security level has not really changed.

And honestly, it's a truly frightening view. Software/Infrastructure security is becoming more and more important as sensitive operations are increasingly done through websites (ex: banking operation), private data is increasingly stored in the "cloud" and an increasing number of devices are now connected.

Security flows are still as numerous as before, but their impact, once exploited, tends to be far greater. If it continues like that, something really bad will happen, exactly what is difficult to predict (massive data leak? major industrial disaster caused by a hack? an election being manipulated?), but it will happen.
>> "making startup time even worse than the JVM itself makes it unattractive

Agree.

Do you know if this can generate native code without any JVM dependencies? For instance, could I implement a C compiler that outputs optimized native code just like gcc or clang?

At any rate, it sounds like this research could be used to produce the tools we want, even if this is not it. For instance, PHP could use a JIT, if it didn't cause slow warm-ups and blow up memory usage.
I'll have to check it out! Thanks for sharing. :)
"Write and submit your first Kernel patch" by Greg Kroah-Hartman:

https://www.youtube.com/watch?v=LLBrBBImJt4
Thanks! That was one of the more kafka-esque debug stories. Going to reread it for old times sake and encourage anyone who hasn't to give it a look over.
I can see how that would be beneficial. I am just trying to put it all together into an app.
> I've met some really really brilliant people who've been banging their head against that particular wall since the 1980s.

The idea of breaking meaning into an inventory of discrete components like this is at least as old as Hjelmslev, I think even Saussure touches on it.

Part of it seems to me to be that you're breaking down words into words. Even if you write it in uppercase and call it a primitive, you don't have to spend too much time on cognitive linguistics to know that there's really nothing primitive about MAN or MONARCH...
As a web developer, nothing keeps me more motivated than well-written specifications and user stories from the product team.
> What programmers have if anything, is the luxury of relative indifference to the ending of an employment relationship, since a new one is relatively easy to find.

Only if you're in SV and you've got 5 companies across the street looking for you.

This is untrue for the other 99.99% of the surface of the planet.
I prefer Antergos w/ i3+gnome. It's sleek, beautiful, and i3 makes coding a breeze by using a keyboard-centric flow.
> The real problem people are running into is app overload.

Honestly, they don't. In your previous post you went through your scenario of having to check a bunch of apps. You are a developer, not a typical user, so the typical user has way less. Also, all apps have notification icons, so you don't have to open them to figure out if there's anything there, you can take one glance at a screen on your phone, and you know which three had something. Or take a look at the notification area in your phone, which has the same info.

You're building an app for yourself, great! But you have to realize that everyone is not you. :-)
New type of wind energy
Those posts are really interesting.
It's definitely the easiest to install of the three. There are some tradeoffs, though:

* No dependency resolution. I consider it a feature, but quite a few folks will understandably consider it a huge drawback.

* No PAM. Again, whether this is a feature or a drawback depends on the user.

* No systemd. Same story.

Basically, the aim of Slackware is full customization and transparency, which means that users are not required to worry aboit dependencies or broken authentication systems or binary log files. Slackware also has a pretty strong "if it ain't broke, don't fix it" mentality, which probably explains why the installer doesn't look all that much different from the one in Softlanding Linux System ;)

I'm sure you already know all this; just clarifying for other readers on this thread. It's definitely the easiest of the SAG Trifecta to install, but it deviates pretty strongly from the Linux distro norm due to its history and philosophy.
from the second link:

> Q: Do you ever think about retiring?

> A: Every day. No, not really. I can't leave my kids to Microsoft. The government won't fight the battle. The government won't enforce the laws.

i'm not old enough to know the context, and out of context this is pretty funny.
Antergos is another option, I like it a lot better than Manjaro personally.
This is exactly right. Good programmers can for the most part take their pick of job offers. The key part here is in order to motivate a good programmer to work for you you have to offer competitive pay and a competitive environment. The reality is that they can probably quit working for you and get a raise to boot if they feel unhappy.
Another important Swedish company bought by the Chinese, after Volvo and Saab.
'UP-100'+service+was+officially+launched+Breaking+UP-100+latest+hot+news
>>There has always been a fear of face-to-face communication with people outside of your ‘inner circle’. Messaging apps have removed the face-to-face fear people have...

That is simply not true. Messaging apps allow people to hide behind screens, to avoid facing their fears and are killing real communication.
Its the same sickness as the "infotainment" systems in cars. Its obsolete the moment it leaves the factory floor and the device lasts for years.

The screen should be the screen. It you want to make it smart, plug in a Fire Stick, Chromecast, Apple TV or roll your own with Kodi and a Raspi.

This is getting stupid. Its to the point that I bought one of these(1) and neutered an older smart TV that we had by replacing its "motherboard" just so it would act as a simple screen.

(1) http://www.ebay.com/itm/Universal-V29-LCD-Controller-Motherb...
I had a similar thing happen to a friend of the family whose business I provided IT services for. He had 2 servers and 2 rack mounted UPS's and a handful of other devices that all fit into the same rack. One day I needed to do some maintenance that required shutting one of his servers down. This was a backup server that wasn't actually used for anything as long as the primary was up and functional.

The problem was that as soon as I shut the backup server down, his entire network stopped working. I was trying to the maintenance over a VPN, so immediately I lost access. I don't really have a clever way of telling this right now, but after a lot of frustration trying to figure out the problem remotely (and wondering if someone had pwn'd his servers and was using the backup server to MITM all his traffic) I drove out there and noticed the problem right away. The UPS that the backup server was connected to was faulty, what was happening was that once the server was no longer pulling electricity from the faulty UPS, it failed to power the other equipment that was plugged into it, one of those things being a critical switch. As soon as the server was powered back on, all the other equipment attached to it immediately powered up too.
> Good programmers just don’t work for money

This is incorrect.

Correction: Good programmers don't work only for the money.

> It’s hard to find good programmers

Define good?

I've been at startup hiring 1 new decent programmer every week. Stopped calling that hard since.

> Programming is not a 9-5 ‘duty’

Programming as a 9 to 5 job is fine and recommended.

Web startups may overwork and exploit naive young programmers into working more, doesn't mean their job can't be done as 9 to 5.