skysight-inc/HackerNews huggingface dataset:
Agreed. I feel like the state of documentation of Haskell libraries in general could be much better.

There was actually a thread on /r/haskell a few months ago [0] in response to an HN comment. In that thread, a few libraries were mentioned as examples of having amazing docs.

For instance, Gabriel Gonzalez writes a Tutorial module for his libraries, which introduces the basics of the library and shows you the big picture. The tutorial walks you through different pieces of the library, how to use them, and how they come together.

It's hands down one of the most effective ways of documenting I've ever seen and I'd love to see other communities' take on it.

To point out a specific example, you should check out Turtle's tutorial [1].

[0]: https://www.reddit.com/r/haskell/comments/5khts3/on_haskell_...

[1]: https://hackage.haskell.org/package/turtle-1.3.3/docs/Turtle...
I was the PM for this at Twitter. You pretty much nailed it. The straight Address Book algorithms are Reverse Address Book (your #1) and Strong-ties prediction (your #2 and #3).

LinkedIn for sure also uses common groups (schools, workplaces, interests, etc), and geolocation in their recos. There's also sneakier signals like app graph and browsing history, though in my experience those were more useful for content recos than people recos.
Clearly Putin. If you make democracy look untenable it becomes less threatening to an autocrat.
Well, imagine yourself on the interviewer side of the table. If you have a candidate who genuinely knows more than you, will you honestly turn them away for lack of a degree?

Obviously, you'll have problems getting past HR/filtering processes, and knowing more than whoever interviews you is a high bar.
That article is about the fake "4chan" offshore bank account document that was circulating earlier this week. It is not about the email dump.
I disagree. I've been using PHP for about eleven years now, even since the bad old days of PHP3, and I have never used, and generally advise against using, wordpress. PHP will be around long after wordpress.

I do concede that if PHP went away, WP would somehow survive, like some kind of post-nuclear cockroach.
Well, that'd certainly be an effective technique. Dump a bunch of real emails, but slip in one or two horrible fake ones. With just a couple days to an election it could have an impact on a tighter race than the French one is currently.
They do.

Obama campaign had a contract firm that implemented and enforced infosec. They even tossed USB keys in the parking lot to catch campaign workers that we're dumb enough to try them.

The problem is beyond rote security at this point. We're in the realm of talented, well financed threat actors with databases of 0days.
And yet, most software jobs interview for CS knowledge. Maybe there should be code camps for interview CS knowledge.
"The Macron email dump came minutes before France's campaign blackout started at midnight. Candidates can't respond before polls open Sunday"

- https://twitter.com/RachelDonadio/status/860624629899157506
They've been working on a module system for Java for years (codename Jigsaw), one goal of which is to modularize Java itself, and the other goal is to have a module system that developers would use. It hasn't gone very well.

Today, to run a hello world app, you have to have the entire Java SE platform on disk, including GUI code, XML parsing, CORBA, a MIDI player, etc. A lot of that code is itself written in Java; you'll find there's a 64MB "rt.jar" file that provides a lot of stuff. One goal of Jigsaw is to allow you to write smaller Java applications on memory-constrained devices.

Jigsaw does an OK job at modularizing Java, but has mostly failed at its other goal: to provide a standard module system that Java developers would use. I'm sure somebody's excited to use Jigsaw in their application code, but not many.

For example, Jigsaw's module system has no notion of libraries with versions. Imagine using Maven or Gradle without any version numbers. That's Jigsaw.

Jigsaw also set a bunch of other rules that get broken a lot in practice: no circular dependencies, immutable dependencies declared up front, resolve all modules eagerly, etc. These are good guidelines, but it may not be appropriate to make them iron clad rules.

In contrast, there's a hugely complicated monster module system implemented in Java userland, OSGi. OSGi has a ton of features, including letting you load multiple versions of the "same" jar at once, so one part of your app can use the old version while another part uses a newer version. (And then there's Maven, Gradle, etc.)

This certainly wouldn't be the first time Java tried to deliver a "standard" solution for a problem that we used to solve in userland that went ignored by Java's dev community. (Logging?!) If we all ignored Jigsaw and kept using Maven/Gradle/OSGi, but the Java platform became more modular, that's probably a win.

But Jigsaw includes another poisonous feature; it "improves security" by forbidding access to internal JDK APIs like sun.misc.Unsafe, which provides access to direct memory management. For better or worse, that internal API has been used and abused by a lot of popular Java infrastructure libraries, so they're now introducing a new Unsafe feature in Java 9, but it's not the same one, "breaking" compatibility. It's their reserved right to break that API, but but but.

And finally there's the fact that Java 9 has taken a hugely long time, and this is significantly due to Jigsaw. If Jigsaw misses Java 9, does it land in Java 10? Throw it out completely? (Does Java ever get modularized?)
You would think they would ...

Um, yeah, they've thought of that (and have been told that 10,000 times) already.

Just that it turns out these organizations -- and the threat models they face -- are a bit more complicated than you would seem to think. And the task of finding qualified and, crucially, trustworthy people who can also interface with the sprawling, chaotic, and (inherently) politicized juggernauts that underlie these campaigns, even more so.
You need a code of conduct when you have 2000 people drinking in a hotel, having parties etc. Someone is going to be an asshole and having policy ahead of time means you don't need to think of a solution on the spot. It's a fair system.

Read it here. It's pretty low key for a code of conduct.

https://2017.penguicon.org/code-of-conduct/
Even that was debunked, as a french journalist on Twitter spotted that the pdf leaked (earlier today) was poorly doctored with an vector-based image editor, and was able to move the actual text layer around.

Source (in French but pictures are enough): http://www.numerama.com/politique/254983-compte-offshore-dem...
If there is no intent -- no 'goal' -- then there is no such thing as failure. When machines fail, they go into exceptional 'failure' states, and that's all that failure is: a state you'd rather not be in.
Also, considering that bit about unroll.me that came out recently, are there any (non-linked-in) apps that you've authorized to see your contacts? Those services may have sold your address book to LinkedIn.
You _can_ use Symbols for `action.type` in Redux, but that's discouraged, because they're not serializable and thus will not work properly with time-travel debugging. See http://redux.js.org/docs/faq/Actions.html#actions-string-con... .
That's not how democracy works comrade. Russians and right wing populist nut jobs are engaging in concerted effort to harm the free world and everyone in it for their own benefit. If you don't actively help to protect the principles of modern democracy you're effectively complicit in it's destruction.

You don't get to sit there crying like a child "wahhh but it's not exactly the way I like it!". The fact of the matter is if one option isn't great when the other is actually dangerous, you get off you butt and participate in the process. That's your duty as an adult that get's to live in a democratic society.
Or me, since I want isolation and fewer ties to Europe.
The US is mostly unique in having 18-24 months to fundraise, A/B test, staff up, etc.

edit: Regarding this...

> The major parties in all developed countries have permanent election teams with many multi-million pound budgets.

That's very likely. However, the bursty nature of elections means they're probably also onboarding thousands of volunteers and temporary staff in a very short period of time.
> "Is democracy suited to solving issues like climate change"

Noam Chomsky gave a talk[1] about a month ago about that question, but his version substitutes intelligence for democracy. Species that are successful at maintaining their niche over evolutionary time spans are not selecting for intelligence. Survivability of a species, population size, and speciation rate generally decrease as intelligence rises.

I might believe we have a chance as a species if we were doing anything even remotely realistic to address our actual long-term threats, but we aren't. Instead, the actual actions being taken seem to be almost unanimous trying to accelerate us into disaster.

[1] https://www.youtube.com/watch?v=TK0R_06zOOY#t=128
I don't think "just now" is used to mean the future (in a few minutes, or hours, or days).
I remember hearing about a CEO that was unable to get any feedback from the board of directors until the phrasing of the question asked shifted from criticism/feedback to advice.

People are worried of giving criticism because you're effectively asking them to rate/evaluate your performance. However, when you ask for advice you're either asking what the other person would do in your shoes or you give them an opportunity to boast about their knowledge. While the end goal is the same, at a psychological level, the perceived reason for the question is different.
The big advantage of a U2F key over other forms of 2FA is that it gives you stronger protection against phishing. Phishing attacks that would give me control of your email with other forms of 2FA don't work if you use a security key.

Unfortunately, phones still don't support a physical security key. But you can still use the authenticator app there. On your laptop, U2F is a big step up.

Whatever you decide, you should not use SMS as your second factor. U2F keys, TOTP (the authenticator app) and push notifications are all significantly safer.
Here's what the XML files look like:

https://gist.github.com/anonymous/316b9fd1108b026e116e91f134...
Makes sense to me. A lot of bodily fluids sit right on the line between "gel" and "liquid" at room temperature. And gels promote biofilm formation. A few degrees too cool and all your externally-exposed fluids are now gels all the time.

Thus half the reason for saunas (besides the Heat Shock Protein effects): they turn all the gels caught in your pores, your sinuses, your tonsils, your lungs, etc. to liquid, where your body can then much more easily flush them out.

Though, freezing cold air isn't that bad, either: a lot of those liquids will become fully solid. Frozen snot grows no bacteria.

I guess it's just the "danger zone" principle of food safety, applied to human tissue?
Actually, ANSSI (French government agency for the security of IT) gave some workshops to campaign teams.

Source (in French): http://www.zdnet.fr/actualites/lection-presidentielle-l-anss...
This statement that "If you want to build a commons, first you have to have something to share" doesn't relate in any way to a need to own this concept. Trademarking "Internet of Agreements" doesn't somehow give you more of "something to share", rather it gives you less. Whatever your reasons for capturing your IP, so that you can monetize and control it, generosity isn't among them IMHO.

What you're trying to do is define a space so that you can capture an outsized share of the attention and therefore the financial value from it. Plenty of people name spaces without needing that capture.
> The problem is beyond rote security at this point. We're in the realm of talented, well financed threat actors with databases of 0days.

State actors
Do big companies buy 3rd party databases that they can cross link data or is it easier to build your own with linkedin patterns?
a Canadian political campaign (Federal) lasts at most 45 days, with probably an estimated 45-60 days of additional lead up time to prepare for it when it's obvious a vote is going to be called... The parties still seem to find plenty of money to spend on 4/5-star hotels, chartered airplanes, staff, etc.
Beer Can Be a Better Pain Reliever Than Tylenol
I think the FCC will respect the first amendment but may object to the potty-mouth sentence you quoted. They went after Howard Stern in a similar situation.

More to the point, Mr. Colbert should be ashamed of himself. Have some decency, Mr. Colbert.
Lots of SJW ninjas around here.
I agree with the edit. If you build a partial solution (in other words, a library designed to be compiled with other code) and GPL it, you're making it difficult to use, but if you're providing a finished product (whether that's an App or an OS), a GPL license can make perfect sense.
Phishing isn't always a link to a bank website with poor formatting/grammar, and there's nothing inherently unsophisticated about it. Sure it doesn't involve number theory or anything like that, but researching the hundreds of associates someone like Macron knows and crafting convincing, personalized messages for each of them is a large undertaking and really hard to defend against.

Imagine you get an email that appears at first glance to be from your spouse, it mentions your kids by name, and it also mentions that the spouse ran the numbers on your upcoming refinance and can you check the math in the spreadsheet she just attached. Assuming the attacker did their homework (i.e., names were right, you actually are going through a refinance, etc) there's a good chance even savvy users will open that excel file.
well, he is a right wing candidate. Not as right wing as Le Pen, but that doesn't make him left wing.
> "sophisticated hacking attempts" are nothing more than an excuse for one of their staffers clicking a phishing email?

These phishing attempts are definitely very sophisticated. Have you read the Trend Micro report? https://documents.trendmicro.com/assets/wp/wp-two-years-of-p...
I think that is likely the case, but I don't know if that is an exclusive thing anymore. A lot of what I read about reminds me of 1970s sponsorship of various terror entities and revolutionaries.
My fault for being distracted while trying to add content. It's too late for me to be the one to remove the comment.
One thing that confuses me is how China doesn't possess the advanced alloys for ballpoint pen nibs? It's just an osmium alloy, not that difficult to do. They've got osmium out the yin-yang (no pun intended) and should have had alloys of that long, long ago.
> Does the "Rust standard of quality" for these crucial crates include "no unsafe code"?

> Everything else with unsafe code is an optimization. Often a premature one.

Rc, Arc and Box require unsafe code for the obvious reasons that are not premature optimisations. Any attempt to use a syscall (look at the nix crate which wraps libc with safe APIs) requires unsafe code.

Unsafe doesn't mean "this code is bad". It is true that unsafe code should be treated very carefully, but it's purpose is so that a sufficiently clever human can implement safe code that the insufficiently clever compiler cannot verify.

Really it should've been called trustme rather than unsafe. ;)
Okay, I'll bite. I learned programming entirely on my own, both from the manuals that came with my computer and from magazines, both computer specific and general purpose (Byte mostly---it was a fantastic magazine in the 80s).

But this was in the 80s, when computers came with decent documentation and a guide on programming. It also helped that I was in high school and thus, had the time to devote to self study without having to worry about supporting myself.

So I think it's possible, but it requires a degree of discipline and self-motivation to learn. Not everyone has that.

But to say that "if a person has any sort of formal education in their background ... they are then entirely unqualified to offer such an opinion" comes across as arrogant.
apple and ibm were directly responsible for the import taxes. not the other way around.

the clones by cce and others were done in clean room. so apple and ibm and texas Instrument had no legal recourse. but after brazilian clones started to sell like hot cakes in europe, they convinced the usa state department to intervine and treaten to stop importing oranges from brazil. since most generals on the dictatorship had huge orange farms they caved in. and thats is the only reason why to this day that country have 80% tax on imported electronics.

the dictatorship also gave in to demands for other markets, like telecom and tv. globo (largest tv station) was started with american capital, but after seeing the profit prospects, the generals were quick to nationalize it and cut the americans investors out.

the only thing that saved brazil in terms of technology were the "micreiros". people who would buy imported computers in Paraguay and sell them illegally in brazil. Those folks deserve a national monument!
Imagine the competence of government employees but without the financing.
There is a PR with pinboard JSON support now.
Famed nonpartisan custodian of information Wikileaks' Twitter feed is trying to argue that timing it for the day before the election when the candidate is barred from properly addressing the rumours in the media proves that it isn't an attempt to influence the election (and it's totally unfair that it will be used to boost hostility to Russia)

Assange truly has no shame.
While I agree that it should be protected under free speech, I'm not sure haranguing the president who half the country voted for while making offensive remarks with respect to the LGBT community is the best marketing ploy. Seems like if anyone should be upset it should be his employer CBS. However, paradoxically sometimes controversies actually increase ratings so they might be fine with it.
Whenever you decide to have a standup is a random time for some people.

For some, it will be too early, prematurely terminating their sleep cycle and rushing them in, probably leaving them below peak cognitive performance for the entire day.

For others, they are already in their awake-and-productive time, and they'll either have to stop to join, or they will simply waste time until the meeting, knowing that an interruption is on the way, and being preoccupied with those thoughts.

To work as a team, this is going to happen here and there, and that's fine. But to do it daily as a ritual is an incredible tax on your human capital for no good reason. Not only that, but you're filtering out your talent pool to folks who don't perform at their best under these constraints. From what I have seen, these can often be very high performers.
As child care costs have risen, at least some families in the middle have concluded that it makes little sense for the parent with worse career prospects to work solely for the purposes of paying day care costs. When stagnated incomes can no longer pay for the expenses required to work, working makes less sense financially.
I have read [1] that France has a 24-hour period before voting where political reporting and campaigning are forbidden.

Were these documents released during the blackout period? If so, that's kind of clever, since it will presumably be all over social media, but more respected information sources who could debunk wild claims may be forced to remain silent.

[1] http://www.electoral-vote.com/evp2017/Pres/Maps/May05.html/#...
> I'm curious what percentage of laws you think are just and/or should be obeyed on principle and not as part of a cost-of-punishment calculus.

There isn't a single law that I obey as part of a cost-of-punishment calculus. Of the laws I know to any meaningful degree, I'd judge maybe 70% as essentially good, defer to those who wrote them on about 20% that deal with subject matter I'm unfamiliar with, and (would) follow around 9% even though I disagree, because they were democratically enacted.

Of course there's a vast universe of law I'm completely unaware of, such as the financial sector. But whenever I had to deal with some more specialised parts of the law, I found them to be mostly reasonable.
I'm speaking from this perspective, I dropped out of school and barely made it to my CS classes. I learned on the job through internships and resources online.

You can test the vets on the knowledge and grant them special certifications that can single out the ones who ha ve tested out of the curriculum.
From a nation state actor standpoint it is probably a lot cheaper to pay gobs of money to a half-dozen antisocial young black hat types (that have been messing around with linux since age 12 in their bedroom in belarus), than to fund the PLO.
Yes, of course, it's all totally a coincidence that every time these conveniently-timed-for-election hacks and document dumps happen, it's always to the benefit of whatever candidate is running on a "let's be friends with Russia and ignore what they're doing in Ukraine and Syria" platform.
Good catch - "blower". I still use that term myself and so do several others in my acquaintance. Even kids understand what I mean so it is definitely embedded in the national conscience here still or at least they get the idea by reference and context.

Without any research whatsoever I'll also venture that "blowing" is what people used to do when they had to rush downstairs to answer the new fangled telephonic device and ended up out of breath. However, again without research, there is a good chance that the RN and co would have referred to the voice tubes on ships as "blowers" because that is the sort of word they would pick. I know a lot of modern matelots and that theory fits nicely.
I think the main benefit of a graphical language, as opposed to text-based is the rapid feedback loop. You see the response after every click.

This is the same reason so many people can build complex spreadsheets, yet wouldn't know where to start if you put them in front of an IDE.

I brought a book 'Computer coding for kids by Carol Vorderman' for a friend's daughters for Xmas (aged 6 and 8, both VERY bright with grades above their age groups). As learning to program makes you think differently, especially problem solving skills. It's gone down really well. Especially with older one who spends hours reading the book, even when she doesn't have computer access (and is now set on buying Chromebook with her pocket money).

A language such as Scratch is great for sparking initial interest, before going on to more depth.
And then there are those with sheep skins that still can't program FizzBuzz.

I even had professors in computer science that hated using computers and could barely conceal their contempt of them.
While I'm sure you are right that you would totally never do something like that, it's likewise a truism that virtually all security goofs like this are commited by programmers who think they'd totally never do something like that. To wit: I don't believe you.

What almost certainly happened here is that, as someone else in this thread mentions, someone came by to fix an automated warning about the use of strcmp(a, b) and replaced it with strncmp(a, b, strlen(a)) instead of strncmp(a, b, strlen(b)). Easily 90% of code reviewers wouldn't catch that mistake (especially if it came along with a truckload of other such fixes), and as it's a maintenance change no new tests would have been written for it.

The only way to catch this would have been to already have written and deployed a test that expressly tested an empty string password. That's surely a good test to have, but come on, be honest: you've probably written a bunch of "password" style checkers in your career. Did you deploy a test and integrate it into CI for every one of them?