skysight-inc/HackerNews huggingface dataset:
Oh, I suspect all devs, I just think a sound process around small, cross-disciplinary devops teams is the preferred approach.

I get that a firewall can sometimes help fight broken practices (eg: bind on all interfaces, no password by default). But if your devs end up deploying password auth in general (rather than key/cert based) - with weak passwords in particular - your firewall is unlikely to help in the case where a service is supposed to be exposed.
Interesting idea. I use Ad-blockers but I'm not so sure I'd go so far as to encourage other people to use them, each to their own.
In point of fact, the survey gives a bit more detail than what the parent implied.
Thesaurus Query Plugin for Vim
So it's a problem that Mongo can't handle dumb ass admins? Yeah Mongo, you suck!
While Vim can be used for purpose more than coding, its plugins on linguistic
assistance is quite lacking, especially in terms of synonym search and
replacement. Hence since almost a year ago, I started working on a plugin that
serves as an thesaurus query platform which can utilize multiple search engines,
online or offline, to render thesaurus query result and replace words in Vim
buffer for potentially multiple languages. And now, I'd say it has already
become a assistance tool pleasant to work with.

By default, only English online routine (wrapped around thesaurus.com's
functionality) is usable. But with minor configuration, it is easy to use
openoffice's thesaurus database and mthesaur.txt, too. It also support German,
Russian and Chinese query. And according to a German friend, it works great for
German.

Give it a try if you are interested. And I'd be glad to hear feedback from you
guys.

Note: the plugin require Python support from Vim.
Close your failure loops
Which is why you need to audit every pathway the data travels along.

And why RMS only uses computers with free software firmware.
On the other hand, if you do B2C, it's just about the only way you can actually comply with all of the relevant EU tax and consumer protection rules. Mercifully, B2B is mostly spared that particular nightmare for now, though the reverse charge mechanism is not exactly fun to work with either.

It would certainly be helpful if Stripe made it easier to reconcile everything needed for those EU VAT returns. Some essential things like determining the exchange rate that was applied for a particular transaction if you work in multiple currencies remain quite awkward. The deposits from Stripe into merchant bank accounts also still don't seem to have any reference supplied so you can trace them back through the API to find the underlying charges, refunds, etc.

It is nice that they show the country of origin for the card now, though. At least that gives most merchants a fighting chance of keeping enough evidence of where every customer is based to satisfy the EU VAT rules.
> Using testing is sworn against by almost everybody, as it's the worst of both worlds - it's not stable and it's not fixed quickly.

Nonsense. Testing is stable and up to date. Ubuntu is based off of testing. Debian's rolling release system makes upgrades easy.
A newly hired employee had the strangest problem with his ethernet when he started.

Whenever he plugged in ethernet it would only give him 10mbps. But if he unplugged and replugged it in. It'd switch over to 1000.

What was more strange. On off. Router or hardware on off. Reboot. Nothing would switch it over to higher speed. We tested it a dozen times. But if you plug it in. Unplug then plug in a 2nd time. Viola 1gbps connection made. Always 10mbps the first time. Tried 4 wires and 3 different switches on multiple computers. Problem is his computer. Even reformatted computer and tried different hardware ethernet ports. Never fully resolved why it always need to be replugged in twice though for faster connection.
I agree with you, but to me it is a problem that goes back to the people who made the decision of allowing admin accounts without a password. In a world where software stacks have multiple applications, programming languages and databases, it happens that people are not experts in everything. They make mistakes. Then there is a huge pool of companies who have poorly skilled devs coming from the Wordpress/Drupal/Prestashop/Etc background who many times don't actually know anything about security.

Then there is the fact that MongoDB is known for having a very bad reputation among software engineers. I could personally write down many horror stories that I experienced myself, plus all the things you get to hear from friends and tech blogs.

Maybe after this attack some companies ban it from their software stacks. I really hope they do so. The world would be a better place without MongoDB.
The point is that if your records are a mess, then it's your problem - once the taxman gets note of a part of "cashing out" (either by seeing the BTC->dollars transaction, or seeing whatever large you bought for these dollars), they don't need to find out if you earned these bitcoins or at what price you bought them.

They can simply ask you to provide the evidence yourself, and if you cannot, then tax the full rate on the full amount.
There is a thing in software that is called "sane defaults". Some of the best software tools in existence are a mix of a solid base AND sane defaults. If you have a crappy base and dubious defaults, your software probably sucks.
I always use low gearing when going downhill, updated the story.
Strategic attentive writer for learning macro-actions
Counterarguments:

The older libraries (that caught on) are still perfectly fine to use. There's no reason you can't still be running an Express.js app with Backbone.js + RequireJS (for modules) in the front-end.

We have a Backbone.js + RequireJS app at work and it's totally fine, well structured OOP, and arguably a great codebase in comparison to some Angular 1 architecture horror-stories I've heard about.

Of course it takes strong, level-headed devs to say "no we're not rewriting it in Angular".

In terms of jobs, being able to search for 'framework + jobs' is kind of insane anyway. 'language + jobs' makes more sense, a dev should be able to pickup any framework pretty quickly.

Not everyone in the Ruby community was that happy that Rails become so defining, you could argue that it was an anomaly to have a language so dominated by 1 framework.

That said I do prefer Rails/Django over any backend Node framework to-date, at least when it comes to the DB/ORMs/migrations story (which then lead to mature CMSs too), so I don't love that no Node backend framework grew comparable mindshare there.
It suffers a different problem though: Name implies your given name, possibly including your family name. Surname is much more specific (family name only) and thus not suitable in any case where that's not what you meant.

This is not an easy problem to solve. For every "easy" example of a good name, one readily encounters an easy counterexample that renders the name ambiguous or unfit for a particular purpose.

Names must necessarily include context to be meaningful. If "name" is an unambiguous identifier in your scope and it's obvious what it does, great! Don't fix what isn't broken. But when you catch ambiguity or uncertainty, revisit the code, so future developers have an easier time understanding what you meant.
The more things change, the more they stay the same. I'm thinking of people who back in the 90s/early noughties didn't want to bother with a middle tier application, and instead talk directly to the database from their fat clients(1) because it was easier.

(1) This, btw, is what many SPA are: fat client apps running within a browser. When I came back to web development four years ago one of the biggest surprises was how much like desktop development it had become in many ways.
Oops, you're right, corrected above. (I am not a native speaker)
Why do so many MongoDB installation lack a password on the Admin account?

I tried search for me info, but could find anything. Was this the default? Procedure given in a popular tutorial? It seems pretty insane.
I went to App Academy a few years back. I ended up taking a software development job at just about the salary they advertised, spent over a year there, and then moved on to one of Amazon/Facebook/Google/Microsoft.
I often want to share an article but hate the fact that people who'll click will expose themselves to a lot of crap if they're not running a blocker. Obviously I'd rather not link to such sites at all. But with so much of the news media now filled with ads, it's often hard to avoid. I feel a little better doing it through this.

I was also thinking of showing a before and after of the linked site, with and without an ad blocker. :)
What we need is better tooling. First of all, stop pretending that structured (one of world's most complex structured) description of commands and expressions is "just a text". If programming environments stored sources as structured items, it would be easy to give an entity many names (e.g. human description, full qualified name, short name in current module, and shortest scope/mind-local alias). And then switch modes from 'first time reading' to 'familiar development' (or 'lawyer style', where descriptive names appear only in appropriate places and assertions are visible). Similar issues we have with formatting, ridiculous tabs-vs-spaces wars, encodings, even with line endings.

Try to open raw html/css instead of using browser to view modern website. Hard to get the picture? Yeah, and that's where we are in programming today.
Will the Liberal Order Survive?
Yet we've evolved to use symbols, which are short sequences of phonemes or glyphs, and to connect these together to form sentences, which are lists of symbols.

People who speak the same language are able to communicate perfectly well, almost all of the time, across continents and centuries. New words are rare compared to existing vocabulary and often soon disappear from use. New concepts can readily be mapped onto existing vocabulary. People are able to learn other languages and improve their own with the help of dictionaries and grammar books. Things like humour, cryptic crosswords, and social signalling are edge cases. And things like deception are unrelated to language understanding at the semantic level.

We're discussing the best way for computers to understand natural language and communicate with people, and in practice that's either going to use unambiguous language or it's going to need human help or verification.
Carlos  Gonzalez Ft. Mario Crespo Martinez:”Baila Pegaito”
> They deserve it. Maybe it will teach them something.

My thoughts exactly.
It was the default for at least a year I think. They changed the defaults, but that didn't impact any existing default configs...
The typing aspect is really not a problem to me, but I get what you mean (also, "strong" typing is different from "static" typing). It seems also that staged compilation is becoming more and more used in statically typed languages. As for interfacing with low-level code, this is basically a major aspect of why Common Lisp is appreciated. Interfacing with C libraries is done routinely (CFFI: https://common-lisp.net/project/cffi/manual/html_node/index....). You write shaders in Lisp, you can interface with CUDA, and so on.
America's Got Talent -Sofie Dossi
How to Get Terminal to RaspberryPi via SSL from Anywhere, No Port Fwd
"how is the IRS going to enforce the tax code against a someone who tumbles their coins"
TL;DR - in the same manner as they enforce the tax code against someone who gets income in under-the-counter cash.

If you obtain large amounts of money, then you (presumably) will want to use it to obtain large amounts of goods and services. You can hide your income, but it's harder to hide your spending.

If you spend it all on food, booze, drugs and minor items, then they don't care about you, since the amounts aren't that large.

If you want to buy mansions, flashy cars, high end jewelry and ownership in companies, then they have evidence of you spending much more money than you have declared income. At that point, it becomes your problem - carefully tumbling your coins simply gives the IRS evidence that instead of treating your situation as "forgot to declare that income" (fines) they can prove that you took explicit steps to hide and disguise that income, which carries a risk of jail for tax evasion.
> it is a problem that goes back to the people who made the decision of allowing admin accounts without a password.

No. Just.. no.... Security of YOUR system is YOUR responsibility.

> In a world where software stacks have multiple applications, programming languages and databases, it happens that people are not experts in everything.

Hire one.

> Maybe after this attack some companies ban it from their software stacks.

Or maybe decision makers realise that yes, you do need to pay for skills.
If you want to contribute to the Go project itself, this article is a good start: https://blog.gopheracademy.com/advent-2016/contributing-to-t...

For all other Go projects, check the project documentation or ask the maintainer(s) if and how you can contribute. This should not be different from any other (i.e., non-Go) open source project.
The same story on Ars has had a bit more traction (120+ comments).

https://news.ycombinator.com/item?id=13345947
> Shaking things often fixes problems.

Oh, indeed. I remember my father, a disabled former engineer, having an expensive McIntosh audio system. He was always fiddling with it, fixing it, applying anti oxidation spray, etc. My parents decided the large wall furniture (in which the audio system was, together with books, TV, etc) was to be replaced.

It turned out that during the giant relocation one of the compartments of his system (IIRC it was the tuner, but it might have been the pre-amplifier or amplifier as well) had become broken. My father, who was nearly blind, made it his project to repair the installation. He was failing, and my parents discussed sending the broken part of the audio system back for repair which would set us back a large sum of money.

Then, at some point, there was an earthquake of 5,5 on the Richter scale. (Having just looked it up the epicenter being 5,8 it was the largest earthquake ever registered in The Netherlands.)

The damage: a photo of a family member, protected by glass, had fallen and the glass was broken. In our wall, a rift appeared. Many things just weren't on their correct place. The radio? Ah, the radio. It worked again when it was put on!!
Lets bet
So it's a response to American imperial ambitions?

Note how missile defence in the nuclear arena can't be interpreted as purely defensive as it increases the viability of a first strike.

America also has retained the right to the "first strike" option unlikely China which has declined such an option.
>> it is a problem that goes back to the people who made the decision of allowing admin accounts without a password.
> No. Just.. no.... Security of YOUR system is YOUR responsibility.

I agree. But what you are saying has nothing to do with whether a database should have sane defaults or not.

>> In a world where software stacks have multiple applications, programming languages and databases, it happens that people are not experts in everything.
> Hire one.

You seem not to know much about the real world out there. Companies are struggling A LOT to find ANY people at all.

>> Maybe after this attack some companies ban it from their software stacks.
> Or maybe decision makers realise that yes, you do need to pay for skills.

More money is not going to magically increase the pool of skilled software engineers around the world. If all the companies in the world increased what they pay, nothing would change, besides the fact that they would spend more money.
I had the same problem. After unsuccessfully trying several garages to fix it, I learned how to fix cars myself (read lots of blogs, watched video on YouTube, read a couple of books) and redid the whole brake system: disassembled the caliper, cleaned everything thoroughly, changed brake pistons, changed sealing rubbers and dust covers, installed new brake disc and brake pads, new brake pin (greased it with the appropriate grease). Problem went away.

It was a rusty/incorrectly installed brake pin. Sometimes brake pads wouldn't return after you stop pressing the brake pedal. After brake system rebuild everything moves smoothly and brake pads always return to the initial position - no more weird sounds.

Also, when changing the brake pads, I've noticed that one of the pads (that was failing to return) was much thinner than the others.

Problem is: when they change the brake pads in the dealership/garage, they don't rebuild the whole system or grease the pins properly. You will not notice and they're not paid for the extra quality work. So things like this happen quite often.

The only way to do everything properly is to do it yourself. In case of a brake rebuild it's not very difficult but very time-consuming. Most difficult part was to insert the new piston back in the caliper.
When we press the right buttons, we see that the world is plenty of crazy leaders.
Seen some mentions of Recurly and Chargebee and Sentry did something in 4 weeks of engineering work and 10k LOC.

With that said, are there any open source solutions that come close to not needing a 3rd party? I say close, as covering the loss with development time is not a problem in my case.

Unfortunately, I am not able to use Stripe.

Thanks!
EU passports use all the languages, but only via a page with translations for each field.

My British one has English and French on the data page, and a number to look up the translation.

http://news.bbcimg.co.uk/media/images/48863000/jpg/_48863568...
I guess it's probably "wait for more advanced robots to be developed"
The question is can you create a language like Scala with it? Ie with complex type inference? Or Haskell? Because if it constrains you to Java like languages, I don't see this as "innovation in language design".
If you go back to the fifties or sixties it's quite possible a family might have a car but not a freezer.
Did you get appropriately reimbursed?
My god, the autoplaying YouTube video disguised as yet another GIF...

The Ob-La-Di Ob-La-Da one ain't half bad, though: https://www.youtube.com/watch?v=w2whZLX8nDw

EDIT: is there an established subgenre for "Chinese knockoff surf rock"? Because if there is, I want a hell of a lot more of it.
> reverse charge mechanism is not exactly fun to work with either.

The reverse charge mechanism is great. The alternative system was to register for VAT in all 28 EU member states and file returns in each state. The reverse charge mechanism means if you are exporting services, you only have to deal with the your local tax authority. (Unless your customers are not VAT registered, then you have to make sure you stay under the threshold in each state.)
Maybe I'm being all "get off my lawn", but I feel this is an almost inevitable result of attitudes about new stacks, the rise of the bootcamper, and hackathons-turned-product. In theory that young hipster developer that fits the mold would be just a junior on the team, and their enthusiam and foolhardiness towards moving fast and breaking things would be tempered by more mature team members and operators. However, I think we're seeing a world where 2013 bootcamp grads are the seniors and the cult of hacking and iterating and breaking things means situations like this will become more common.
This speaks volume on how human can rationalize any phenomenon. When faced with a unexplained event, we all try to rationalize cause behind it even if there's not the real cause.
From Surely You're Joking, Mr. Feynman, it seems Richard Feynman too was inspired at a young age and developed a very strong sense of curiosity of the world and how things work. In Feynman's case, though, the inspiration came from his father, but he wasn't home-schooled.
Everyday Authoritarianism Is Boring and Tolerable
Indie Microblogging owning your short-form writing by Manton Reece – Kickstarter
(Note: Just finished watching it, and despite the title, the linked video does not actually touch on this topic. Sorry for the irrelevant link.)
The worst place on earth
AFAIK, this is how docker CoW works. Your read-only parts i.e. base OS / starting point of the image is always shared. As you make changes a per-container R/W layer records those changes. This link explains it well -

https://docs.docker.com/engine/userguide/storagedriver/image...
This is a little vague to me. Could you please go into more detail?
> [...] sane defaults [...]

Defaults - sane or not - lead to exactly these types of situations. It encourages "it's good enough" thinking, and dilutes the feeling of responsibility.

> You seem not to know much about the real world out there.

yeah, yeah... yawn.

> Companies are struggling A LOT to find ANY people at all.

Uhm, not companies that are willing to pay good money for good devs/devops/sysadmins.

> More money is not going to magically increase the pool of skilled software engineers around the world.

I would argue that it is the software developers' job to develop software. It would be a sysadmin/devops type person to look after the infrastructure, and make sure it is properly secured. I see so many job ads for a single role (developer, engineer, CTO, whatever) and then a jobdescription for "must be able to do everything related to any aspect of all our IT". Hilarious.
It is variable, the stations are multiplexed on channels, so sometimes you can use the same stream and sometimes you have to switch. That takes time.

I presume the TV hides that by always taking the same amount of time to change stations.
Search for "VAT MOSS", should be easy to find good resources.
Rock music has more information (in Shannon's sense) than classical music.
The headline currently says "Nate Hentoff" but it's Nat, not Nate.
It's entirely unclear to me why bitcoin tumbling provides any systematic anonymity. Sure, it makes it more difficult, but it's just more transactions which need to be tracked. There is nothing that makes it impossible.

Indeed, in many ways they make things worse for users who attempt to gain anonymity by using it. Once the addresses which are used by the tumbler service are identified it is pretty easy to identify other suspicious transactions.
Good idea? It's political suicide! Their name would be dragged in the mud faster than you can say "exploitation". You can only offer low payments (that is, in exchange for something, not donations) to people who don't really need them, never to the homeless or otherwise unemployed.
The OWASP top 10 has barely changed in 20 years and SQL injections were always part of it so bootcamps weren't needed for developers to start inserting security vulnerabilities in their apps.
I found this interesting: https://i.imgur.com/FrqmGMz.png

Apparently being a secretary is more moral than being a priest.
Because the difference between a defensive system and and offensive system is only a few small modifications.
Wow, I never expected so much responses. It seems like there is a lot of us here :)

For me (as student still) it's interesting to see some similarities between software development and design. I consider programming as some form of design - solving problems is design mission from its beginning. It's nice to see people applying experience in solving macro problems (design) to solve micro problems (programming).

Also we all are a bit like Eames - trying to find better and better solution.
> I am not a gazillionaire;

Haha, I couldn't have been the only one thinking the majority stake probably cost less than one of the cameras.
As a young hipster developer, I agree with you 100%. Modern startups have generally been taking an approach that is totally dismissive of long-tail risks such as this one.

I think it is extremely unfortunate that financial incentives are currently stacked against engineering responsibly -- a startup that tries to actually secure a well-built product will need to spend an often unaffordable amount of money or time doing so.