skysight-inc/HackerNews huggingface dataset:
She's more terrifying to Parisians and non-French in my experience. I live in the south of France and in my encounters more people here seemed to fear Melanchon -- especially small business owners who, in my very unscientific polling preferred Fillon by a large margin. Taxes and regulations really crush independent business growth -- that's a bigger immediate issue than the immigration boogeyman or the EU. However, I want to stress this is just my own unscientific polling/conversations with people in my area (the Luberon specifically.)
Since this thread is somewhat rehashing the old arguments ("you write once, but read many times, therefore EIBTI"), it might be worth reading a more modern take on the topic by Aaron Turon of the Rust core team in his essay about the Rust language ergonomics initiative[1].

> But this, in my opinion, is a misdiagnosis of the problem, one that throws out the baby with the bathwater. The root issue is instead: how much information do you need to confidently understand what a particular line of code is doing, and how hard is that information to find? Let’s call this the reasoning footprint for a piece of code. The pitfalls above come from the reasoning footprint getting out of hand, rather than implicitness per se.

> Does readability then demand that we minimize the reasoning footprint? I don’t think so: make it too small, and code becomes hopelessly verbose, making it difficult to read by forcing too much information into view at all times. What we want is a sweet spot, where routine or easy to find details can be left out, but relevant or surprising information is kept front and center.

[1]: https://blog.rust-lang.org/2017/03/02/lang-ergonomics.html
This perspective is only from my limited experiences with Node in writing and interacting with existing node software.

Node is great if you want shared state, there is no overhead to access state introduced by many users of your system. Making a game server of sorts seems like a good fit. It is also running on a proven technology which is battle tested by millions of users independently each day.

But, with the cost of trivial access to shared state, there is no isolation. A metaphor from the Erlang community is that it's tolerable to crash a one on one phone call, but not the entire switch and everyone connected through it. I have experienced existing software with space leaks which need to be restarted every week to remain operational in production with tolerable latency and resource footprint. It doesn't seem sane to me. (The example here is a channel pub sub server)

Indeed PHP for large deployments requires tuning or alternative implementations (e.g. HipHop) to be reliable and fast at scale. But one aspect PHP does that node does not is assume isolation. Isolation is not a guarantee, but if one page crashes, most of the time others are not directly impacted. If on PHP processes runs out of memory, same story. If one tries to starve the scheduler, it will eventually time out and be killed.

Your point on it having a legacy of many integrated parts is very true, and I share your conclusion on not expecting it to move fast.

Many developers are coming to the shared perspective that simple software should have simple extensible cores and it is okay to have multiple implementations for a class of features (e.g. templating). This model of independent reusable parts is where we will see fast moving technology grow.
Try Common Lisp, you get the basic blocks like a routing library, some templating and a db connector.
Then you add up macros as you need them.

Power without magic.
If you look into most high-profile hacks, you see that their opsec and security practices were weak.

You don't see Amazon or Stripe being hacked all the time, and they are certainly large enough targets.
They mean the vague superset. No one checks with HN on terminology.
The downvote brigade is out in full force here again.

The upvote/downvote forum experiment doesn't work for political topics (which everything has an element of), it just results in censorship of non-status quo opinions.
The problem with comments is that they are too often lies. As the code changes, the comments may not necessarily be updated, and in my experience, they often aren't. Automated documentation and validation are superior to static comments in general. Using a compiled language can help with some of this, and automated tests even more.
This is the new normal, also I'm glad this is happening. Here's why: perhaps this is what it takes to get politicians to take security seriously. Once enough elections have been won/lost because of security breaches in consumer products and commercial networks surely we should start to see consumer protection agencies given charter to protect consumers and bring suits against companies for mishandling breaches or gross negligence.
Code isn't prose and you don't read it out loud or have it read to you. You read it with your eyes so the case of the word is clearly visible. You also have the additional context of the language of the code and syntax highlighting from your editor.

If I'm read app code, a "person" is a variable and a "Person" is a class.

If I'm reading SQL a "person" is a relation (e.g. a table).

I consider losing structure and adding complexity just to be able to read something out loud a net loss.
But that's how things are in mathematics.
Personally, I think it's the keyboards fault. No one is being explicit enough unless they are using one of these https://imgur.com/a/icKnR#pCbeucK
I didn't mean to imply that the system itself would be setup at home.

My point is that loads of kids have the knowledge and common sense to create something that would be more secure against attacks than many professional, corporate or political systems.
I'm not sure I agree with this. Most big software platforms are used differently by different users. They have a wide range of features that most of us don't need (and maybe don't even know exist). What I think ends up happening when you clone something is you end up improving the product for YOUR type of user. This may or may not make up the bulk of the market, and may or may not be an improvement for typical users.
Parent said they publish everything they receive. They didn't receive Republican emails.
I'm not a security expert so this is a serious question.

Do you think there's a way to take security seriously enough to successfully defend against state-sponsored hacking? Is it simply inevitable that this sort of hacking leak will happen, or is this leak likely the result of some low-hanging fruit security tips being ignored?
It's OK to do, but it makes memory analysis difficult. If your app exits with a lot of allocated memory, it's hard to tell what's a real leak and what's not.
https://www.hrw.org/news/2011/01/28/us-misuse-material-witne...

I think my point is, as long as these exists there is probably less pressure to update the law?
In the middle to late Rails period, there are some patterns that are implicit, for example, DCI, Presenter and Form object. In my view, Rails is not Rails anymore; it's going beyond buffet (as mention in his talk: https://www.youtube.com/watch?v=Cx6aGMC6MjU). It's like it provides LEGO building blocks and people use them with their own plasticine shapes. Data flow through in weird manner. IIRC, there is a place where Rails copies all in-controller's instance variables to in-view's instance variables, and tell people to pretend that they are the same objects.

Ruby itself is strange (in implicit way) enough on how things are defined and called. Maybe it's just me, I don't even understand its OOP although I came from C++ background.
Awesome reply, thank you!
This is a verifiably false comment that I hope was written from ignorance and not something else.

Seth Rich was not killed by "inner-city violence." He was killed by an unknown assailant, presumably in a mugging but it is again unknown. It was also not in the inner city, but in the Bloomingdale neighborhood which is rather nice and you can read about it here [1].

>Given the fact that you can't walk around America's inner cities without getting shot

Again, this is far from what I'd call a "fact" and is rather ignorant. Plenty of people live and work in inner cities across America without ever being shot or shooting someone. Your bizarre appeal to authority with quoting Obama doesn't have any bearing in reality. Seth Rich's murder may have been, and likely was, a random act of violence. But that does not justify the assertions of your comment.

[1] https://www.washingtonpost.com/express/wp/2016/08/12/heres-w...
Literally read about the radioactivity craze of the early 20th century in A Short History of Nearly Everything. Entertaining read.
"assessment update: several Office files have Cyrillic meta data."
https://twitter.com/wikileaks/status/860855087165571073
It can teach the most fundamental basics of procedural language design and compiler construction: how to implement selection, loops, and functions/procedures as well as scanning, parsing, and code generation.

By bootstrapping, I'm referring to building a T3X9 compiler for a new target platform and than using that to create something more interesting. You can start the process by re-implementing the compiler or by re-targeting it.
If you don't think that gets into the head of the swimmer's competitors then you are mistaken. Further, success attracts success; a swimmer with a slight advantage wins more prize money, attracts the attention of better coaches, gains more fans and so on, all of which may combine to improve performance by just enough to maintain a competitive advantage. All these might seem like extrinsic factors to you but interdependence and interaction are a reality; pure independence is a useful analytical tool, but we dwell in the world of matter, not of forms.
Agreed. I'd rather read books in my couch at my own pace than feel stressed about finishing the latest non fiction self help book.

The best way to read more books is to make time for it and read books you enjoy.
If you want to write your own magic in code, you likely want a lisp.
I just published an article arguing the exact opposite a few days ago, funny timing:

https://medium.com/@shazow/code-boilerplate-is-it-always-bad...
Even that seems like an improvement over status quo. Plus, having such an archive seems like the sort of thing that could be made irreversibly public should there ever be even a temporary rule change. I feel like some of our political will around copyright has eroded simply due to the fact that we're now habituating to a lessened degree of rights and access.
Can Venture Capital Deliver on the Promise of the Public University?
It's my default keyboard on Android and I experience none of those issues.
There would have to be a seriously large polling error. Much bigger than the Trump margin.
https://fivethirtyeight.com/features/le-pen-is-just-a-gargan...
It makes perfect sense to me. What about it doesn't make sense to you?
It is not that I think consciousness is required for inference, but that my own process of inference takes place in/via what I'm calling consciousness, and I'm guessing (but cannot be sure that) the same is happening for you.

This is why I ask: does it seem to you that anything at all is happening? Your answer cannot tell me whether you are conscious (or a p-zombie who is lying), but it may help you see what I'm getting at. If you ask me to be more precise (about "seem" or "happening"), I cannot. I can only trust that you are able to understand me.

If it does seem that something is happening, that is consciousness. If you answer that it's an illusion, and it may not really seem, but only seem to seem, that's still good enough.

So I can't tell you "how" I can be certain that something seems to be happening, and I cannot prove it to anybody else, but it certainly does seem.
Le Pen is openly supported by Russia, just like most right-wing parties in the EU. And it's been like this for years.
The point is that any teenager can likely get into your house, burglarize you or murder you.

You could go and live in a vault, but that would take the fun out of living and so as a society we have dealt with this by making this illegal and the chances of getting caught are large enough that people tend to not do those things.

But if the chances of getting caught were near zero you might have to go and live in a vault.
Previous discussion: https://news.ycombinator.com/item?id=14277346
I played at some point with Tor bot code and I got rates up to tens of thousands of requests per second and hundreds of megabits per second. So the attacks don't sound too serious in this case. Also modifying Tor itself to allow higher data rates is possible, if you're already using anonymous systems. Then you can avoid the slowness caused by onion hops.
Why are most programmers white males?
Very cool. Nice work!
For every explicit thing in the code the programmer must pay attention to it when reading/understanding how the code works.

For every implicit thing in the code the programmer must have a mental model of what it is doing behind the scenes.

So one taxes the attention system of the programmer, and the other taxes her memory system.

Other things are both explicit and require a complex mental representation of state (Haskell), but the type system makes many classes of error impossible.

I think most people would agree with DHH's aesthetic when it comes to abstraction. What makes ActiveRecord's approach to abstraction get ugly in many cases is its coupling to the mutable state of the underlying database, which is not guaranteed to be in sync with the logic implied by the declarations, which may also have unforeseen timing side-effects.

Imagine the more typical scenario:

class BusinessContract extends ActiveRecord::Base
belongs_to :company
belongs_to :client
belongs_to :sales_rep

acts_as_attachment
acts_as_state_machine
acts_as_versioned

before_save :notify_rep
after_save :update_salesforce_api
after_update :generate_pdf
end

This class is now doing a great deal, and the user of the code needs to understand the time-dependent aspects of it and side-effects.
Is that you Sebastian Marshall?
I grew up listening to Seger's singles in the '80s and never cared too much for his work. I am a massive music fanatic, and read several music-related blogs that turned me on to his pre-Bullet work. Way different than the Night Movies and Only Rock n Roll that I was used to.

Definitely seek out the "Never Mind The Bullets" bootleg mixtape

https://doomandgloomfromthetomb.tumblr.com/post/86612418452/...

http://www.aquariumdrunkard.com/2012/08/23/east-side-story-n...
I grew up listening to Seger's singles in the '80s and never cared too much for his work. I am a massive music fanatic, and read several music-related blogs that turned me on to his pre-Bullet work. Way different than the Night Movies and Only Rock n Roll that I was used to.

Definitely seek out the "Never Mind The Bullets" bootleg mixtape
https://doomandgloomfromthetomb.tumblr.com/post/86612418452/...
http://www.aquariumdrunkard.com/2012/08/23/east-side-story-n...
>your entire point rests upon the incorrect assumption that the other side isn't corrupt.

no it doesn't. Anyone's corruption should be exposed for the betterment of society.

Rather, it is your argument that solely depends on the belief that others ("the other side") MUST be guilty. I understand emotions run high to match the stakes since it was the presidential election after all, but you'll note I didn't make any value judgments either way. Just because we are convinced one party is guilty doesn't mean we should ignore evidence of another's corruption out of fairness.
Part of the issue is that many people will be willing to answer questions like these anonymously, but asking the "why" identifies those employees. Most of the time people don't speak up because they are afraid of the consequences/ramifications.
Perhaps less controversially, the whole non-editorial editorial policy is super-vulnerable to manipulation. The source can stick anything they want into the stream since WikiLeaks' stated editorial policy is "that's not our job." Garbage in, garbage out.

If you've got bullshit that you want to look real, stick it in the middle of real shit and get WikiLeaks to leak it. Proof!

[minor edit for grammar]
It sounds like you went though a similar process as the computer vision community over last couple decades.

First people used to write classifiers by hand, but they found it's too tedious, unreliable and has to redone for each object you want to classify. Then they tried to learn to detect objects by using local feature detector and train a machine learning model to classify objects based on that. This worked much better, but still made some mistakes. Convolutional Neural Network were already used to classify small images of digits, but people were skeptical they would scale to larger images.

This was until in 2012 AlexNet came along. Since then performance of convolutional networks has improved each year. Now they can classify images with similar performance as humans.
>>You'd think evidence of corruption would be relevant and worthy of mass coverage, no matter who committed it or how it was obtained.

Our justice system cares a lot about how evidence used in a trial was obtained. If it was obtained illegally, it is often thrown out.

There is a good reason for this. I'm sure you can figure it out if you think about it. Here is a good start for some reading: https://en.wikipedia.org/wiki/Exclusionary_rule
>we have the means to built and maintain a global distributed digital library of Alexandria, but not the political will or legal means.

The copyright problem is not how to ensure the incentive for artists to continue to create, although that is how the discourse is always framed. The problem is how to secure the incentive for consumers to continue spending money on increasingly banal drivel when there is a solid 400 years of music history at your fingertips.

That's why What.cd had to be eliminated. It's not about artists. It's about rights-holders and their bottom line.
The U.S. and other leading colonial governments have interfered in foreign governments for decades. Source: Noam Chomsky.
Sure, but if I'm a major candidate in a national election, perhaps I should be protected by my domestic intelligence service. This is what I don't understand: why aren't we playing defense? Why isn't it a huge embarrassment to the Secret Service (in the US) or another defense agency when a campaign under their protection is successfully attacked like this? I would love to see the Russia investigations in the US Congress add a focus on bolstering defenses, rather than just doling out blame. The same should go for France and elsewhere. Cyber-defense is an arms race, but it's a battle that can and should be fought. Surely this is something all parties can agree on!
It indicates very clearly that the leaker is editing Word documents before releasing them, since French Word users are not going to use Cyrillic.

And it shows the leaker is not uber-competent.

So, if an email from Macron looks too depraved to be real, it probably is.
You are seeking to confirm that there is a targeted attack on Macron and his movement. En Marché has been hacked recently, Wikileaks published it. Now one of his campaign leaders, 50 year old woman who helped him with everything regarding privacy and surveillance, dies. Then concluding from this that it cannot be conincidence is what is known as confirmation bias. Seeking to confirm one's pre-formed hypothesis.
That is one weird array in Google's reply. Looks like it could have been an object instead, whereby JSON hijacking wouldn't be a problem.
If you are a Mac user looking for a native app that's similar to this or Workflowy, FoldingText is amazing.

http://www.foldingtext.com/
A trusted source and well-known person in the hacker community has said there is a copy of what.cd out there... although it's understandably not accessible to the public.

And no, I have no idea how to access it myself.
A Software Developer's Intro to Soft Skills
the deal breaker for me is actually picking up a new book to read, often I stop at the "searching a good book to read". when you start often is inertia.
Infinitely nestable lists of items where each item can be a note, todo, or project.
Oh, boo! Boo to this thing! It is an affront to my sensibilities, and would seek to tell me I am wrong to find attraction where I expect it to be!

Boo, that anyone would tell me my love is wrong! Boo, to the very idea that my love at first sight is unfit to survive the slings and arrows of this cruel universe!

Boo, to the slightest belief that my handsome and wonderful instincts would lead me astray!

Boo, to this! Boo, I say!
Internet of Things security vulnerabilities? Start with the most valuable Things!
Very cool project. I think the front page should have a little more information on it though, in fact if http://flowdash.co/app/about was the front page that would be perfect.
I agree on QS vs BI, and I think it all comes down to monetization. I'm sure more QS apps will come, but I'll be worried about data use and privacy unless there's a very clear alternative business model.
check out https://www.npmjs.com/package/react-icon-loader - converts svg to stateless component with svgo optimizations
I love projects like this because, while it doesn't necessarily have a direct application right away, it solves a piece of a problem that could go a long way to help something else. Reminds me of the skittles/M&M sorting machine that someone built a little while ago. As more projects like this develop, we're teaching computers more and more about visual recognition.

Can't wait for Skynet to go live! :-P
I would encourage you to read up on what the gene-centered view actually states.

> that doesn't make any sense

If you look at the criticism leveled against this theory you will find that many of them have been addressed by the proponents of the theory, in many cases very successfully. Many things can be said about this theory but your claim strikes me as highly unqualified.
The problem is the politician's kneejerk response is to reduce security by introducing backdoors. (See the legislation they actually try to pass)

They don't do what you suggest they should.
Notice that I said "Advantage" and not "Features". Users don't care about features necessarily. They care about how it helps them. If a feature helps them, then it is a good feature. If not, then it won't matter. Figuring this out is the hard part of running a business because every user is different.
FB prepends a "for(;;);" which is 1 char shorter than "while(1);", has been the case since 2012/13.

Firebug v2 and ChromeTools know how to parse such JSON and ignore that first part. (IE11 and Firefox newer DevTools can't "handle" it aka show just a plain text string)
Correct. It is not the prosecutor's office who pays the bill.
That's not what I'm saying. I'm talking about how teenagers can build systems resilient against these attacks, not that they carry out the attacks themselves. (Although I conjecture that a significant proportion of these attacks are also carried out by teenagers.)
Actually here on HN, I have seen some people from Nigeria and Cameron and they have done some pretty good job in their fields.
I never said it was morally correct. I answered the question.
Your argument seems to boils down to "markets working."

But they're not working for everyone. For example, the current housing market is working for large real estate companies that had the capital to buy up risk laden foreclosed homes. It's often not working for working class renters.
I don't think it is a hypocrisy problem, so much as an issue of conflicting desires. A junkie who is trying to quit heroin wants to get clean, but he also really wants a fix. Of course it is more profitable for the dealer to continue selling heroin.