skysight-inc/HackerNews huggingface dataset:
Duck typing is still a type system that can be checked before running the code. Flow for JavaScrip does that while allowing to use comments for type annotations. That is with Flow one has an option to program in idiomatic JavaScript that relies on Duck types and then check for type violations using the tool. The cool part of Flow is that it tries hard to check for various typical patterns making annotations minimal.
You could try spoofing your email address with the correct reply-to?

(if you do find any vulnerabilities you should of course report them responsibly)
I didn't realise yesterday that svn also uses SHA1 for deduplicating pristine filed in its working copy. So disabling rep-sharing isn't enough to prevent broken checkouts: you need to prevent any SHA1 collisions from being committed. See the link from Stefan Sperling (stsp) to the collision rejection script elsewhere in this thread. There is more info about what they need to do to fix this from Stefan at http://mail-archives.apache.org/mod_mbox/subversion-dev/2017...
Were the passengers standing while taking off ?
I agree with this.

It'll burn some people out. I can't just read/learn or create things and see it as some kind of stress relief.

You'll feel accomplish and all great things but that's ain't relaxing at all for me.

Playing magic the gathering, just turn off my brain and watching a good tv show either comedy or scifi is my way to blow off steam. Video games can make me angry sometime or frustrated. Mtg can be challenging in term of stress and require thinking skill but I've learned to not over think it and play with my gut. My buddy who I play against over thinks and stress out often in mtg, it's enjoyable for the guy but after several rounds at his cube his brain is mentally exhausted, this rarely happens to me. He often chastize me for not reading the card carefully... though, I just kinda remember them if I play often with the cube a lot. Hell I thought one card had flying cause the creature seems to be hovering in the art once. Bad play mistake. While our style are different I we're pretty much tie in term of deck building skill set and winning rate.
* Part 1 - http://coconutlizard.co.uk/blog/ue4/pvs-studio-static-code-a...

* Part 2 - http://coconutlizard.co.uk/blog/ue4/pvs-studio-part2/

* Part 3 - http://coconutlizard.co.uk/blog/ue4/pvs-studio-part3/

* Part 4 - http://coconutlizard.co.uk/blog/ue4/pvs-studio-part4/

* Part 5 - http://coconutlizard.co.uk/blog/ue4/pvs-studio-part5/

* Part 6 - http://coconutlizard.co.uk/blog/ue4/pvs-studio-part6/
SMS Privacy was attacked last night
> There may be significant long lasting damage to CF's reputation amongst vulnerability researchers, but that's a tiny subset of the population and statistically insignificant to a company that ~10% of internet traffic flows through.

Yes, security researchers boycotting CF isn't going to hit their user metrics directly. But what happens when security researchers advise people to use CF because of their poor security/handling of security?
Costs can be imposed in multiple ways.

Often it's more feasible to apply costs to a higher level of responsbility than the party directly responsible. E.g., sanctioning a country which, say, harbours pirates or highly-polluting industries.

It's the model of collective action and pressure.
I think this is a one-sided view of what really happened.

I can see a whole team at Cloudflare panicking, trying to solve the issue, trying to communicate with big crawlers trying to evict all of the bad cache they have while trying to craft a blogpost that would save them from a PR catastrophe.

All the while Taviso is just becoming more and more aggressive to get the story out there. 6 freaking days.

short timeline for disclosures are not fun.
All passengers were seated, airline non-revs were on portable jump-seats. Per Captain's discretion.

Maximum certificated escape capacity for a 777-300ER is 550.
I think it' bad taste to down vote a potentially world helping service.

And what do you do to make money that is helping us?
Any word on the possibility of credit card numbers having been exposed?
Non-rev = staff travellers, for anyone not in the airline business
> So you suggest planting trees that take 40 years to grow when the people doing the deflorestation are doing it because of profits that they'd never get via that method. (Economics)

You can sell shares of the farm now, and pay out dividends as the wood comes to age. I invested in a brand new teak plantation in costa rica in the early 90s, and am making a continual stream of money from that since about 6 years ago.
It's always nice to see tools tackling the everyday challenges of allowing the non-programmer to solve his problems instead of hot air duds like LightTable and Eve that try to create some revolutionary paradigm that is unfamiliar to both programmers and non-programmers.
IBM's Watson Shelved in Setback for Artificial Intelligence in Medicine
At times, I have found some comfort in thinking about my personal travails from universal perspective. Can my upset really have any gravity, any impact upon a drifting continent, on a spinning globe, travelling round a spiral arm of a galaxy in an expanding universe?

Take a breath, breathe out and move along.

Might all be a hologram anyway...
Don't worry everybody. There is always Mars!
Three management lessons
हस्त रेखा बता देगी कि कितने होंगे बच्चे और लड़का होगा या लड़की
Yes, apologies for my phrasing... the first bit didn't mean "computer bit" meant "human description for the first part of a web response (headers and body)".

To be very precise, I think jgc mentioned that up to 4KB from the bounds of the initial request could have been leaked, where a good section of that was the internal server-to-server communication certs, the raw headers as visible during the internal processing of the request, and then part of the response body that follows... this may have been encrypted or compressed and could appear as garbage.

The focus for site owners on Cloudflare should be on "What do I put in headers that may be sensitive?" or "What URLs do I regard as being secret/unadvertised?".

Typically that will be session cookies and access_tokens. Hence my advice, expire and roll all sessions.

Headers include the Cloudflare internal headers, and so includes origin IP addresses too, so if those are secret for you (i.e. you have previously been the target of a DoS and are using Cloudflare to hide those IPs) then you'll want to change your origin IP addresses too. Though if you have been the target of a DoS then you probably should use iptables to only allow web traffic from Cloudflare IP addresses.
Samsung will start testing gigabit 5G fixed broadband in London and 11 US areas
Dead battery
Battery is dead
Need jump
Emerita Dresselhaus, a pioneer in electronic properties of materials, dies at 86
Maybe, but asking someone to use a new browser is asking a lot. If you like, you can think of this as Opera minifier/turbofier as a service.
Hurry up with the vat meat!
https://web.archive.org/web/20140802021208/http://www.boeing...
I'm writing a shell that does this; right now I'm working on the language itself (a somewhat functional language with basic types and records) and its parser (the syntax is like a terser OCaml mixed with Ruby, designed to be quick to write), but eventually it'll reimplement most unix programs so that their output is actually a type it recognizes, and it'll have something like a FCI (Foreign Command Interface) that would let you easily parse the ouput of commands it doesn't implement.

It's not uploaded anywhere yet (and there's not much to look at right now, just an unfinished parser and the beginning of an interpreter), but when I have time to work on it and put it in a somewhat functional state I'll post it on here too.
> My guess is that if they had had a way to reliably piece together that information, they would have released a list by now.

Or they've got that list - and it's so vast and scary that legal and/or the board refuse to even acknowledge its existence…
I've met her a few times. There is nothing remotely threatening about her.
Pull your heads out of of your arses, America.
Would you teach typing on a physical keyboard, or on a virtual phone keyboard? A lot of young people don't use laptops/desktops.
> Maybe next time don't use a language without memory safety to parse untrusted input

They use Go more than any other companies, your sentence seems a bit odd.
Yes. Here's what Pakistan daily Dawn has to say

"As many as seven passengers aboard the Pakistan International Airlines flight PK-743 (Karachi-Madina) on Jan 20 were forced to stand throughout the over three-hour flight after the airline boarded excess passengers in a serious breach of air safety regulations."

https://www.dawn.com/news/1316682/pia-probing-safety-breach-...
PDF is a perfectly fine and rich digital format. It also allows you to do proper copy and paste, which is much saner than anything paper offers.

Sure, PDF is a light on context clues for automation and is targeted purely at humans. But formats targeted at both computers and humans consistently fail (XML with accompanying XSLT comes to mind), and/or only have terrible tools for creating files (easily parsable, pretty HTML).

Either there is very little real demand or we consistently fail at making alternatives viable.
I agree that, on a planetary scale, it's short-sighted.

I think it would be fair for the nations who profited from destroying their natural environment to pay some cash equivalent to those haven't yet. Otherwise it's pulling the ladder after you already got in.
Back when static typing meant Java or worse, it was reasonable to think horribly verbose and clunky programming was inherent to static typing. But now we know better.
Encyclopedia snabb and the case of the foreign drivers
no clue on 2. for 1, you could have it be "opera mini/turbo as a service" so that you are arguing you are just shifting the viewer to the site, but it's still the user doing the viewing. it helps if you preserve any text ads on the site (or links, with alt-text, given you're probably not doing images. you could also replace images with a grainy black-and-white very low-fidelity version, this also shifts most ads on the original site, without adding hugely to your footprint.) To be honest I also thought perhaps javascript etc could be run, so that the heaviest sites of all are still downloaded and then turned into text versions. In many cases that can let someone browse a site that is otherwise incredibly slow.

This isn't legal advice, just the approach I would use off of the top of my head. I agree with you that it's hard. with the framework "opera minifier/turbofier as a service" it could work, though. Like a remote browser. (in a VM). Like, present it as "lynx as a service." (Lynx being an old terminal-based text browser.) Something like that, anyway.
WTF how stupid is that? You use a company address to sign up, leaving trails within an internal mail service...
Could do with adding Finch to the list under Communication

https://developer.pidgin.im/wiki/Using%20Finch
A shame? Loss of the rain forest means a loss of one of the biggest oxygen generators on the planet. We literally will not be able to breath without it.
Things Programmers Should Never Say: “Who Wrote This Awful Code”
Hoversurf: flying drone-bike
Do you not see a problem with cutting people who just so happen to work for newspapers that endorsed his opponent? On the balance, would cutting those people improve or degrade the quality of media coverage of Obama, compared to cutting reporters who are already on his side?
Python type hinting and aliases in Python 3:
https://docs.python.org/3/library/typing.html

I've just finished porting a small application to Python 3 just because 2020 and deprecation is in sight already - there are so many things that have passed me by in the Py3 world.
Sorry but I don't understand the down vote , I was trying to understand the situation ?
THIS IS WHAT YOU CAN DO: https://eowilsonfoundation.org/half-earth-our-planet-s-fight...
> driving up demand will in turn drive up supply [and] increase forests

I'm not sure this follows. Increasing the demand will merely incentivize deforestation at an increasing rate. If you start putting controls on it, the black market will just work around it just like with exotic parts from animals like horns. Let's assume you yourself are a woodcutter who believes in sustainability. The problem is that everyone else will just be thinking about short-term profits, especially when demand is so high. (see: the tragedy of the commons) If trees could be grown fast in farms like other animals or artificially like diamonds, you might have a point, but trees take so long to grow and if the demand is high, it will only encourage fast growing and killing of trees. You mention that optimizing for quality requires longer growth, and that assumes that quality wood is in demand which would also fetch higher prices, but that's debatable around the type of tree and its use. (you yourself say you have a market that require an "artisan" type of wood, but the majority of the world will be happy with whatever wood it can get, especially considering we use mixes in stuff like paper) Due to the limiting factor (time), demand will outdrive supply.
That's right, mirroring the built in (3.x) abc collections heirarchy. Which then allows you to do interesting things like delegation based polymorphism by registering with the appropriate metaclass so - just to come back to your parent's point - interrogating the type reveals it to be list-like or dict-like.
I currently use G Suite, and pay $5 per user per month. FastMail honestly looks like a better client than Gmail, but G Suite provides Google Calendar, Drive, and Docs, which all integrate together beautifully. Hard to justify switching to FastMail for the same cost and losing Drive, Docs, and Calendar.
Why? If people don't want to vote, then they shouldn't vote. A person not voting because they know they are uninformed or don't care is great.
Drivers harass a woman by not accepting a trip?
↑ Performance summaries of (some?) 777 models.

Not sure how's that relevant to this article, though...
I ginned up this little tool tonight to help people out instead of grepping.

https://bleed.cloud/index.html

Sorry for the index.html, trying to figure out how to get index file to work on cloudfront.

You can also run the python script on the website anonymously on your computer to dig sites out of your email, which is a good indicator that you have an account with them.
I ginned up this little tool tonight to help people out instead of grepping.

https://bleed.cloud/index.html

You can also run the python script on the website anonymously on your computer to dig sites out of your email, which is a good indicator that you have an account with them.
Yes, the problem seems to be that the general public is expecting journals/conferences that are essentially implemented by a research community as a tool for their ongoing research workflow, to fit to the goals of informing the general public - but there reasonably would/should/must be a gap of something like a year (or many years) between the finding must be initially published so that others can work on that research, and the time when the finding is reasonably verified by other teams (which necessarily happens a significant time after it's been published) and thus is ready to be used for informing public policy.

It's like the stages of clinical research - there we have general standards on when it is considered acceptable to use findings for actually treating people (e.g. phase 3 studies), but it's obviously clear that we need to publish and discuss the initial findings since that's required to actually get to the phase 3 studies. However, the effects seen in phase 1 studies often won't generalize to something that actually works in clinical practice, so if general public reads them then often they'll assume predictions that won't come true.
With all due respect, they should suffer a pr catastrophe.
Kim Jong-nam killing: Suspect 'was paid $90 for baby oil prank'
>Many do on an anonymous chat app called Blind.

...

>And over 2,000 Uber employees in total use Blind, says Blind's head of operations Alex Shin.

Jebediah O. Springfield! As the "head of operations" at an "anonymous chat app" you have ONE JOB, Alex Shin! And you just blew it.

(To be explicit, I am saying Alex is way out of line for disclosing this information. An anonymous app should not have such information revealed even in the aggregrate - you can see what just happened as a result. Instead his public, and private, statements should have been "We do not disclose - confirm or deny - any users who may or may not use Blind, their affiliations or locations.")

In point of fact I do agree with sharing this news, however it should be presented disclosing as little information about employees as possible. Plus the app isn't doing a very good job if its traffic is easily distinguishable from other apps' traffic (technically making it possible for Uber to take the actions we've just read about, or directly monitor based on telephone MAC addresses, the exact employees using the app and the timing of their doing so).

But there's not so much that can be done about that. However, revealing the number of users at a company is not information that should be given out, in my opinion.
Happy to know it could help you. Good cooking to you!
> It also allows you to do proper copy and paste, which is much saner than anything paper offers.

Technically it does that, yes. Rarely do I see people taking advantage of it, though; most of the times I tried to copy some text out of PDF, the result had to undergo a significant cleanup before becoming usable.
In addition to this, I hold the rather controversial opinion that: most of the time, "good enough" is good enough.

There's no merit to striving for elegance in everything you do. You're better off shipping 3 projects with inelegant kludges than 1 perfect one. The customers aren't going to care. The users aren't going to care. You ship more code and create more value. Everyone's a winner if you bodge things more!

Within reason.
People downvote over some dumb stuff sometimes on HN, but I'd be careful about posting a complaint about being downvoted that contains no other contents. It's against site rules and could get you in trouble.
From: https://en.wikipedia.org/wiki/Easter_Island

> Population: 6,600
That's not quite how routing works -- null routing the attackers affects RETURN traffic to the attackers. By then, the damage is done, the target host is already overwhelmed with attack traffic.
If by 'meaning' you mean "an important or worthwhile quality or purpose", that's subjective.

To me, a collection of stars, dancing together around a bigger, brighter star, swirling gases and dust around the ether, until the one large star finally shrinks and explodes, hurtling all that matter out into the universe to become the seeds of new life, is worthwhile.

The universe doesn't have a sense of what is bleak, or chaotic, but it probably does have a sense of what it should do, and does it according to a set of laws and principles.

On the contrary, it's humans who seek to break these laws and bend nature to its will, seemingly for the purpose of saying it could be so. Honestly, nature seems full of meaning, but humanity not as much.

Just enjoy your life. The only real judge is you.
How would you rewrite websites to optimize them without parsing untrusted input in the same memory space as sensitive information? The thing you're trying to change (the HTML) can have PII or be otherwise sensitive.

(I used to work on Google's PageSpeed Service, and if it had had the same bug I think we would have been in the same situation as CF is now.)
True, but probably still better than the US or UK: https://protonmail.com/blog/investigatory-powers-bill-email-...

Their EU servers are in the Netherlands. Although I guess it's hard to know if any EU traffic goes to the US servers.

Australia does have similar laws but it seems they don't apply in this case: https://blog.fastmail.com/2015/04/09/fastmail-is-not-require...
Specifies passenger and cargo limits
I'm curious, on a scale of 1-10 how big of a transgression do people consider this to be?

When I was in India it was common to have people sitting in the aisles on long distance buses, trains, and theatre halls where fire evacuation plans were clearly not being followed. Agreed, planes are not theatre halls, but how severe of a breach in public safety is this? I think planes are a special case because they are such fragile systems, but it does seem like in the West we worship health and safety a little too much.
What's the problem? I'm sure those passengers would rather stand in the aisle and get there on time than sit at the airport waiting for the next plane...
The downvoters were annoyed by bad punctuation. ;-P

Don't put spaces before commas or question marks.

Single question mark is enough. "??" looks sloppy.
Pay close attention. This is how people manage to kill normal sensible ideas.

The attack comes on several levels, all of which are dependent on having at least some website/newsite which is willing to repeat your claims.

Your audience can be broken into 3 buckets (several more, but 3 is enough for a demonstration)

1) The first bucket is non-experts but intelligent. Tie them down in various plausible sounding arguments, primarily designed to appeal to people who dont't know the subject, but can make out logical sounding arguments. These people become your rank and file who serve to sound convincing and tie up experts

2) Experts - With your rank and file, tie up all people who know the subject, or increasingly develop methods to keep them distant from actual contact with people. Over simplify their arguments and try and engage Experts in the arena of PR.

3) Everyone else - show that experts are out of touch, or just lie, advertise the benefits and leave out the risks. Point out that experts are currently in debate and cant settle on the benefits (thanks to your hard work).

The general 3 steps to spreading FUD
I had that years ago (~1983) on a flight in China on CAAC. They put a couple of regular plastic chairs in the isle. CAAC didn't have the best safety record at the time.
> A default UTF8 string-type has to be allowed to be used interchangeably with bytestrings since ASCII is a valid subset.

This only works in one direction. Sure, any valid UTF-8 is a bytestring. But not every bytestring is valid UTF-8. "Use interchangeably" implies the ability to substitute in both directions, which violates LSP.

> What comes in, comes in. Validate it elsewhere.

I have a problem with that. It's explicitly against the fail-fast design philosophy, whereby invalid input should be detected and acted upon as early as possible. First, because failing early helps identify the true origin of the error. And second because there's a category of subtle bugs where invalid input can be combined or processed in ways that make it valid-but-nonsensical, and as a result there are no reported errors at all, just quiet incorrect behavior.

Any language that has Unicode strings can handle ASCII just fine, since ASCII is a strict subset of UTF-8 - that doesn't require the encoding of the strings to be UTF-8. For languages that use a different encoding, it would mean that ASCII gets re-encoded into whatever the language uses, but this is largely an implementation detail.

Of course, if you're reading a source that is not necessarily in any Unicode encoding (UTF-8 or otherwise), and that may be non-string data, and you just need to pass the data through - well then, that's exactly what bytestrings are there for. The fact that you cannot easily mix them with strings (again, even if they're UTF-8-encoded) is a benefit in this case, because such mixing only makes sense if the bytestring is itself properly encoded. If it's not, you just silently get garbage. Using two different types at the input/output boundary makes it clear what assumptions can be made about every particular bit of input.