skysight-inc/HackerNews huggingface dataset:
A block isn't a sandbox, and the base language itself has everything one needs to shoot gaping holes in feet. I'm not sure how handing off an empty (or whatever) environment to the eval'ed code can be "safe".

I agree with the author that this is probably overkill, in terms of warning about eval, but I'm also not understanding how merely having a block with a block scoped environment can make eval safe.
There's no disagreement there. Let's remember that `test` is older than most programming languages. I can't find an exact date, but 1979 is the earliest mention of it being in `sh v7` and turned into a UNIX System III built-in in 1981. And, that it was created to solve a problem where there is no type system, so there can be no test for NULL

The Bash-ism `[[` (Compound Conditional) is an attempt to reduce the unintuitiveness of `[` or `test`. However, you would still need to quote "$var". The biggest pain point of using an external application like `[` is that `&&` is a shell construct. As you may know, `&&` means "if the previous program succeeds, then execute this next statement. But, if you do `[ -z "$var" && ...`, then `[` will always fail because the command lacks the terminating arg `]`. To do conditionals with `[` you would have to use `-a` for "and" or `-o` for "or". You would want to do either `[ -z "$foo" ] && [ -z "$bar" ]` or `[ -z "$foo" -a "$bar" ]`.

Conditional Expressions relieve those issues as `&&` and `||` will work between the braces. So, `[[ -z "$foo" && -z "$bar" ]]` is okay.

(Some other pain points to `test` are `=` tests for string equality, not assignment; although, `==` is a synonym. For numerical equality testing, there are `-eq`, `-ne`, `-lt`, `-gt`, etc. Then, for those unfamiliar with the Unix way (and even, to some extend, to those who are), there are three cryptic sets of tests for File Type, Access Permission, and File Characteristics.)

But, then, Conditional Expressions makes a few head scratching changes. Like `<` and `>` are for sorting strings; not numbers. And, instead of leaving `-a` and `-o` as-is, they were remapped so that `-a` is synonymous with `-e` (wat?) and that `-o` is for testing shell options. (Doing a little research tell me that `[[` comes from `ksh88`, so maybe they're there for parity.)

Manpage for `test`, `[`: https://www.mankier.com/1/test

Conditional Expressions: http://www.gnu.org/software/bash/manual/html_node/Bash-Condi...
Uber tracked iPhone users after they deleted the app
@finid's post reminded me of when I asked for help on the CFEngine mailing list and got prompt and kind response from the author; who even advanced the release schedule to meet my needs. This was while the author (unbeknownst to me) was putting together a company, dealing with VC's, etc.

I blogged about this at http://verticalsysadmin.com/blog/cfengine-is-awesome/
Well, this is translating it to something else, no? Just Vulkan is more low-level than Direct3D.
> Is it coincidence that he chose a country that is different and more foreign to most Americans - i.e., he didn't choose the UK or Australia, or even Germany.

According to the article, the three named companies are the three top recipients of H1B visas. Australia, Germany, and the UK are not mentioned because Australian, German, and UK companies are not among the top H1B abusers. There's no conspiracy here. The over-representation of Indians as H1B programmers has been noted even as far back as the GAO report I posted elsewhere.

> China and India each have around 4 times the U.S. population and their economies are advancing quickly; if they advance far enough, the U.S. will be to them as the UK is to the U.S.; also the core of world economic activity will be Asia, where the people and wealth are.

And much of that economic advancement in China has happened with very protectionist policies, so your argument that the US must promote free trade at the expense of enforcing its own laws and protecting its labor-force in order to maintain its economic strength is a little strange.

> instead of large productivity benefits of economic specialization, with everyone using best-in-world products and services (again, many of which are American), we all become limited to best-in-our-country.

Protectionism rarely means the outright banning of imports, it usually just involves tariffs. And there are plenty of tariffs right now in the US and many other countries and the world isn't falling apart as we're forced to use subpar products. (If anything, the relaxation of trade barriers and lowering of tariffs has resulted in more junk.)

I have very little sympathy with the idea that we have to throw the American labor force under the bus because of nebulous concerns about the distant future. We have corporations exploiting the laws to suppress wages and lay off American workers in favor of H1Bs right now in the present, and we know what to do about it. We don't know how the future is going to play out. In the long run, we are all dead.
But if you aren't paying then they must be making money elsewhere.
Scores are normalized so it doesn't matter. If you always give a low score, that score will count more after normalization. It would be interesting to know how they treat outliers: for example, if you give always scores 1-2.5 and then suddenly a 4.
It's not a bullshit fact. Admittedly it can be used to bullshit by blowing it out of proportion, but it is something that happens. Calling actual issues "bullshit" and demanding they are not talked about is not a very good way of getting people on your side.

At least over here in Germany the organisations working to get more renewables deployed and studying these things massively overlap (e.g. nature clubs lobbying/advertising for renewables, and at the same time providing the boots on the ground counting dead birds). It has been recognized as a problem and is now managed, just as other environmental influences of new construction projects are (e.g. evaluating a new location includes a comparison with known migratory patterns/populations and restrictions and monitoring requirements can be set accordingly)
If you mean communication over the process, don't worry, I got the "regretfully decline to proceed"-type phone call afterwards.

What I meant is that I can't recall any feedback like "personable, but algorithms needs work" or "code too messy" or "couldn't answer domain questions" etc. Just a general "sorry, please try again later."

To be fair, this was a verbal conversation from 7 months ago, so it may be there was something like that but I was too preoccupied with the bad news to write it down.
This paper might be of interest[0]: Stratified Synthesis: Automatically Learning the x86-64 Instruction Set – PLDI 2016

[0]: https://raw.githubusercontent.com/StanfordPL/stoke/develop/d...
Why is your ssh even open to the Internet?
Must add the roll button! That was key during battles for me back on the playstation.
Zsh can do all of these things without too much configuration, but Fish is still missing my favorite Zsh feature: `push-line-or-edit`: https://nathangrigg.com/2014/04/zsh-push-line-or-edit
How does Wal-mart stay in business if "no one has money to afford them"?
Encrypted Chat Took Over. Let’s Encrypt Calls, Too
Einstein chatbot shows Facebook Messenger’s potential as an educational tool
I have been using the Java 8 Time API which seems to have been based on Jodatime, and one dependency less
When JD Rockefeller was growing up, the average American rode a horse (if lucky), never traveled more than a few miles from home, few had even been on a train. Sailing ships were the main and dangerous form of sea transport. 95% of Americans worked brutal farm labor jobs. Homes were lit by candle and whale oil, and heated with firewood.

By the time Standard Oil was broken up, railroads were everywhere, steel ships ruled the sea, cars roamed the roads. Homes were lit by electricity. Energy consumption had skyrocketed because the costs (esp. the cost of oil) had plummeted. Labor saving devices increased productivity and the standard of living, and were made possible by cheaper steel as well as cheaper energy.
> Their whole value proposition is to help people control their own privacy and now I kind of feel betrayed..

Really? I never got that. While I'm also a little unsettled by the selling data part, the value prop was always pretty clearly simplifying unsubscribing en masse, which necessarily involved handing over access to the contents of your emails.
TL;DR: impersonation scams
> Not sure it is materially important to the argument

Not really, I've also forgotten to convert a few dashes to underscores in f-strings and probably made a few other mistakes along the way. It doesn't detract from the main point: it's a rough estimate of how such a converted script would look.

Though it makes me wonder if PyLint already has a lint for strings which start with F and have f-string placeholders.
I'm saying I don't know what market forces allow an Applebees to survive.
Only if you are using a version before Java 8
> Note that from Java SE 8 onwards, users are asked to migrate to java.time (JSR-310) - a core part of the JDK which replaces this project.

http://www.joda.org/joda-time/
I've heard this before, is there a source for this? It has all the hallmarks of an urban legend...
Nope, it is very regular to get that as a salary, you normally make up for it in San Fransicso and other big areas via bonuses, stocks, 100% or close to 100% paid benefits, company paid transit/parking/meals/schooling and other adds-ons were their actual financial monetary value far exceed your cash salary.
I'm perplexed here how there doesn't seem to be talk of the fact Facebook had 5.6 million bots disappear in one purge.

In almost every Twitter thread on here there is plenty of disparaging talk about bots and how it makes the social network's MAUs distorted or make it less valuable. Yet, here is quite obviously an indication that Facebook suffers from the same-- if not worse problem because it's a walled garden and less easily viewed.

If anything I'd suspect that an inordinate amount of users on Facebook and its MAUs are bots because of this... that the problem may in fact be more prolific than twitters but goes unnoticed because we can't browse Facebook like we can twitter. It would certainly be a more valuable target as a result since people falsely believe in Facebook's metrics-- versus, say Twitter, where advertisers can see the bots.

... I'm just befuddled right now that the conversation is about how the bots liked a USA Today page and not the bots themselves. Maybe I missed the previous discussion. If I was USA Today, I'd certainly consider dumping any effort for Facebook as the numbers and metrics cannot at all be trusted to be real.
It was in this video but don't remember exactly when. https://youtu.be/r8RxkpUvxK0
"Consent or die" is not a choice, but on free market it is.
At the end of my parent comment I did specifically say I wasn't referring to all Indians - you'd have to be an absolute cretin to label all developers from a population of 1.2 billion.
> This software is by FAR the largest, most complex codebase I have ever interacted with.

This is a problem.

Edit: I want to add something.

Serious 3rd party serious mechanical shops have had the ability to intervene on this kind of equipment - I suppose. The same way that independent serious and competent car repair shops exists.

One problem we are about to all observe, and which actually has already began, is not typically that owners would like to rewrite the software and run their car/tractor/whatever with the modified/rewritten version.

The problem is that vendors are taking the dangerousness argument and (mis)using it as an economic weapon in the same time to gain anticompetitive in the maintenance market -- like the comment to which I'm replying to does, in effect (concentrating on the risks of unrelated open changes, instead of discussing the initial problem! )

And moreover in the same time, car vendors, for example, have proven several time we can not trust them with critical software.
I think for A, you'd have to still normalize and keep reviewing the threshold yearly. 100k is junior salary for SDE in SF for example.

B has the normalization problem full blown.

I'm thinking all we could do is cap outsourcing companies. If you don't plan on having the employee work on your own products, then you're limited to a smaller number of foreign hires a year.
> The tools needed for this were pretty expensive though, and needed some expertise, as the process was somewhat complicated.

This is a problem.
This slide deck is incredible. Slide 8 "Language evolution" compares LISP vs Haskell to a rotary telephone vs a cell phone, then the next 80 code-packed slides are spent re-inventing s-expressions, but more verbose and harder to use.
Is it? And if so, I can see the reluctance amongst some to call us a proper engineering field.
You've fundraised, now stop working (and plan)
> lede

It may be of interest to you, but it isn't the lede of the story. The lede is a pattern of behavior by the CEO, of which that is one element.
"A good analogy between getting code working on my laptop to having code running in production would be the difference between swimming in an indoor pool versus swimming in choppy rivers full of piranhas."
Right. They are not equal just greater.
The Russian puppet narrative isn't exactly a conspiracy theory, several important members of his team have stepped down due to their ties with Russia. And the Russians are behind the hack into the DNC's email servers.
If X then Y doesn't imply anything about not-X, but that doesn't mean it's less useful for describing X.

It's moot anyway because the answer is out there publicly and no heuristic is needed to resolve it.
Illegal. The reason my families health insurance was $400 a month was because the insurer could exclude pre-existing conditions. That's no longer allowed. And I'm self employed.

The ban on pre-existing conditions was done either because the drafters of Obamacare have no clue what insurance actually is, or they actually wanted to destroy health insurance. No one is going to pay for coverage when healthy if they can sign up when sick.

Our first year of Obamacare was $1,100 a month for the same level of coverage as our banned $400 plan. The second year was $1,400 a month. This year the only available plan had the same $5k a year deductible, and was $1,800 month. So we don't have medical insurance any more.

The NY Times link is LOL, I notice how it didn't track how exchange prices have exploded. New Mexico's exchange is going to get crushed like all the others, it can't stop rational behavior. It will soon have to subsidize everyone or all self employed people will be out.
Rose Valley Falls- Best Waterfall in Southern California
I think it takes a certain kind of individual to trust everything they read at face value without getting multiple points of view on an issue and researching their own facts. Not saying we shouldn't hold reporters accountable to higher standards but we live in a time where everything is rushed and pumped out as "content' for ad revenue.
The zero-day NSA Pensionfund congratulates John & Jane Doe to his retirement and wishes him/her a nice golden autumn in his Florida beach villa.
Maybe Google hires firmware developers, but I think they don't hire iOS developers. They hire "software engineers", and throw problems at them. (Or rather, these generic software engineers migrate toward problems that interest them in the long run.)

It prevents Google from having, say, more "iOS developers" than they need when they decide to concentrate on other products. We may debate the merit of this strategy, but as long as Google keeps this strategy, it makes sense to hire engineers who are willing to say "Well I haven't touched bits for a decade but let's see what we can do with them."
Great, but without any counter arguments you're not going to convince me. What specific problems do you see with this reform?

Real life is more nuanced than "everything Trump does is bad," and companies (these three especially) have abused H1B to keep wages low and decrease employee leverage, so I'm glad to see a crack down.
Which market gets it first is not something I can predict. The ground swell is deep and wide though. It's being designed in to products where the architecture will not matter to the consumer. nVidia is very interested and contributing - I would not be surprised if they made something like Tegra with RISC V in a year or two. The government of India is funding several designs (because they want their own processor IP), as are students around the world. Some of the vector implementations are power and area efficient enough that they compete with the best. Don't be surprised if it shows up in the Top 500 in the next few years.

On the software side you've got GCC, LLVM, core boot, Rust, and Google Go, all going there. There are thousands of Fedora and Debian packages already ported.

Several companies exist to support real world implementation by others - they'll help you put RISC V into whatever SoC or system you want.

This is all falling into place for an instruction set that has no production silicon yet. It's going to go somewhere. All it needs is finalized specs and some actual hardware.

Having said all that, one thing desperately missing is a free GPU. If SoCs for the public do arrive soon they will have to come from someone with graphics IP.

I don't expect Intel to be directly affected for a good while, but they will be missing out on whatever markets it takes for the next few years. I do see ARM in grave danger, but not immediately.
How does he guarentee it?
Thanks for the encouragement! :)
GOG sells a pack of the first 3 for $2.49, DRM-free.
> I hope they support Googles VM threads while they're at it.

I saw the slides on the VM threads concept. I'm unsure as to the point. A process essentially sees a virtual CPU, multiplexed by a kernel. The point of a hypervisor could be understood as multiplexing things (aka OSes) that weren't written to share hardware.

What exactly is the point of a VM thread, which I understand as something which makes a VM look to a kernel as a process?

There doesn't seem to be any "win". Apart from perhaps making implementing Type II hypervisors, like KVM, easier. My critique of them is that their TCB is far larger than the Type I kind.

And all this for an architecture that doesn't have any legacy binary software... very strange.
> Java 8 Time API which seems to have been based on Jodatime

JSR-310 was developed in large parts by the author of Joda, more than based on Joda it's also based on lessons learned from Joda.
> Alas, rejection

Is anyone getting accepted to Google at all? So many stories of applications which failed at some point. Calls, tests, onsite, over a month of teasing. Maybe person in his/her 20s has enough time and energy to throw away for something like this.
So you did your Bachelor's in US. (1) A bachelor's degree does not make you more 'skilled' than Infosys/TCS employees. (2) You want to gain "some more" experience before you go back. And this your 3rd attempt to get H1B. So you have been working in US for 3-4 years after your bachelor's degree. Enough experience, right? Sorry to break your bubble but you are not super-talented and all the criticisms of Infosys/TCS employees applies to you too.
I just wish pet hobby language projects stopped making it to the top of HN. That's where asking why is it better is important.
Thank you! Reading through the papers.
Thanks for sharing. Somehow I find a lot of Computer Science texts published under the "Foundations and Trends" model of very high quality.
Problem is that the 3-letter agencies tools get leaked and then are open for script Kidd to use. So you're threat model has a dristributive connection to the 3-letters no matter what.
Fork Proposed for ForgeRock OpenAM (OpenSSO), OpenDJ (OpenDS), and OpenIDM
There are no such incentives.

When writing feedback, you simply look back at 20 other interviews where you asked the same question, and write "candidate X's performance on this question was was in {top,bottom} {5,25,50}% of ... at this level".

You also have no idea how other interviewers will score, and if your score is 1.5 when everyone else's is a 3.9, it's likely that the HC will ignore you.

The HCs do see multiple feedback from you and your peers, so they build a model of your feedback for themselves: P is a soft interviewer, so we'll adjust his score down but Q is a very hard interviewer so we'll adjust her score up ;-)
ForgeRock is back-pedaling on open-source, so a community fork is gaining steam.
tl;dr - alloca costs, history, and why it is problematic

Alloca is somewhat more expensive on x86/x64 than a single instruction.

[0] shows the code generation for four functions that generate and sum an iota array. I used -O1 to make the differences more apparent.

iota_sum_alloca and iota_sum_vla generate similar code. They both require a frame pointer (RBP) and code to preserve the 16 byte alignment of the stack frame.

iota_sum_const_alloca and iota_sum_array generate identical code. Clang recognizes that alloca is invoked with a constant argument.

History of Alloca

Alloca was originally written for unix V7 [1]. Doug Gwyn wrote a public domain implementation [2] in the early 80s for porting existing programs. The FSF used Gwyn's alloca implementation in GDB, Emacs, and other programs. This helped to spread the idea.

Problems of Alloca

[3] is a comp.compilers thread that discusses some of the issues with alloca. Linus does not want either VLAs or alloca in the Linux kernel [4].

References:

[0] https://godbolt.org/g/1JyXhQ

[1] http://yarchive.net/comp/alloca.html

[2] https://github.com/darchons/android-gdb/blob/android-gdb_7_5...

[3] http://compilers.iecc.com/comparch/article/91-12-079

[4] https://groups.google.com/forum/#!msg/fa.linux.kernel/ROgkTB...

Edited for minor formatting changes.
I'm going to go out on a limb and say that people choosing to forward articles that have the temerity to criticise the President of the United States and people murdering civilians in the belief it will grant them eternal life are not the same thing.
In the UK, O2 has a line in their terms and conditions that pretty much say they're allowed to sell your data to 3rd parties.

Now it's obvious why I've got people calling me asking about my recent loan that may have had PPI or that traumatic car crash I was in a few years ago, even though I've never in my life on both fronts. It's my bloody carrier!

If you use Google, shop in a supermarket, use a mobile phone, have the internet, your data is being collected and, in most cases, being sold to "chosen partners for marketing purposes". Everyone's doing it because they can make money from it.
For Google that simply isn't true. Check out Work Rules some time. Google has put a ton of effort in having a repeatable hiring process that specifically avoids this problem of interviewer bias. Most people, even Googlers do not really understand their hiring process and how it works. It isn't to hire the best coders.
We're seeing the same issue. We've been using shared folders with VMware for a long time, which are also slow (but not this slow).

There's a case for keeping the Docker environment stateless and expendable (wipe to restart), and keep certain things (PostgreSQL databases, for example) on the host machine. Currently, that's impossible because of the aforementioned issue.

I haven't tried the "cached" flag since it's still in beta, however.
You think a company like Google would be able to implement a non-subjective and fair interview. Their current process must cost them a lot of talent
That's the American libertarian definition.
I need to write a FAQ for the bus. This will be one of the questions.