skysight-inc/HackerNews huggingface dataset:
It's about being able to reproduce the binary from source. You might think this is pretty much impossible in the Debian context, but things like timestamps, and underspecified dependencies can end up shifting a build's result over time.

If we want to insist that open source code is secure by source code analysis, we need a verifiable build chain, that the code and binaries an analysis uses are the same as what we get later.
Thank you. A lot of people on here seem to forget that not everybody has six-figure tech job. I write down every single one of my expenses and every single penny I earn in my budget. An unexpected $25 can really throw me off.
What ever happened to the project to port iOS and Android apps to Windows? Neither of them working out sucks. I thought if one of them could work out, as long as the porting didn't require more than 10 or 15 percent of a code base to be changed, that could've saved Windows mobile enough to have maybe a 10% market share and perhaps stay in the game. But maybe being that small was never going to be worth it for Microsoft.
>The vast majority of all value is created through the exchange of already-existing assets.

Could you explain that? Not having studied much economics, I would defined "value" the net sum of assets across society. From there, I would say that no value is created through exchange, only through production. The purpose of financial markets would then be to optimize production, not in an end in themselves.
I know lots of people who use venmo, in tech. (LA)
It has a similar meaning to research. What it means is that you can reproduce (compile in most cases) from source code the same bit-for-bit identical binary independently. While this might sound like something that should be trivial to do, it turns out to be far from trivial (timestamps and other environment information leaks into binaries all the time).

There's a website that describes this project in much more detail as well as how they worked around the various problems they found. https://reproducible-builds.org/
Yes does anything like this exist? I would love to remember all of my surfing. I currently bookmark nearly 100% of my visited links.
What issue does that story raise? I mean, any besides the obvious that it is not ideal to bury the dead without having a record?
It means ensuring that anyone can verify that a binary was created from a given set of source code, by recompiling it and getting the exact same file.
For that matter bitcoin is not exactly a fast cheap transaction system, is it?

This is how I explained to myself why I found it so hard to first get a understanding of what it was about : nobody wanted to say what it is.
As long as your data will fit in RAM in a cost-effective way, and you can scale your cluster when it exhausts its memory. AFAIK Netflix are using it as a "real database", but of course not for everything - https://medium.com/netflix-techblog/introducing-dynomite-mak...
I'm using Redis as the main data store for my semi-serious chat app project. For better or worse, all tables, including the userdb is stored in Redis.

In general, an extra layer on top of Redis is a must to make it even simple searchable database. Especially indices can't be ad-hoc implemented with separate Redis commands. Only transactions or Lua snippets that update both data and related indices atomically can avoid data corruption. For my own use, I wrote: https://github.com/ilkkao/rigidDB It supports indices and strict schema for the data.

I think somebody has described Redis at some point as a database-SDK. Makes sense to me.
Not just Linux; FreeBSD and NetBSD have been along the ride for a while: https://reproducible-builds.org/who/
I had never even heard of this app. Yet it seems to be for people in my generation (25). I'm really happy that this is not something that happens in my social circles.

Could be a cultural thing. Most of my social circles involve Latin American people, which is quite a mindset difference from the standard European / American mindset.

Though, even with my European friends this does not happen. I don't mind having paid more than one of my friends at the end of the evening, it'll even out eventually.
The article doesn't require _all_ financial services, legal services, advertisement etc. to be zero-sum. It only needs some aspect, of some of these activities, to be zero-sum.
This is an impressive list of new features! Well done to all involved!
Redis can now be multi threaded in custom modules
NYTimes susbscriptions:

Starting at a low $2.63 per week.
As an example, think of all the nastiness on social networks and the role they played in the most recent US election. Why would you want to invite that into your country?
Maybe it's a regional thing? Almost no-one here uses Venmo. I mentioned it around my friends the other day and they'd never even heard of it. 2-3 people at my office use it semi-regularly but that's how they are--trying out almost any new app for anything. For all I know they've dropped it and are on to something else now.

If I tried to pay anyone with it I can guarantee they'd say (a more polite version of) "WTF is that? No. Do you have money? Try money."
Why are covariance and contravariance important, and how do their type theory definitions differ from mathematical or statistical definitions of covariance and contravariance?

Is it just a distinction of which direction the type hierarchy flows, and the consequences that must have with regard to functions in order for logical consistency to be maintained?
Of course, because arguments about the technical detail would undermine both parties interests.
Another project, which also uses the idea of atomic CSS classes is Styletron [0].
Perhaps their "introductory blog post" [1] better explains the "why".

All in all this has some interesting performance benefits.

It may look insane, but as long as you don't have to manually make and use these atomic classes this is not such a bad idea.

I think the things such as atomic CSS, CSS-in-JS, CSS Modules, styled-components, inline styles, etc. are all symptoms of something being seriously wrong with CSS and at the same time attempts to fix these problems. They are pushing in the positive direction.

I recommend checking out [2] if somebody is interested in these topics. That's where I found out about Styletron.

Cheers.

[0] https://github.com/rtsao/styletron
[1] https://ryantsao.com/blog/virtual-css-with-styletron
[2] https://medium.com/seek-blog/a-unified-styling-language-d0c2...
Not yet. Could you file a bug report?
While most systems have a system-level dialog to enter in SOCKS proxy information, it's still typically up to the application to obey that setting, and most outside of web browsers don't.

There are some applications out there (e.g., tsocks) that hook the relevant system calls, but I find them quite annoying to use. (You need still something to trigger them, to say "this connection should be proxied") I've also had issues with proxy applications whose system call hooks fail to implement the system call. (E.g., one would return from connect immediately with success, every time, prior to the connection actually being established. When the connection failed to establish, the send/recv call would fail. The application would immediately loop back to re-establishing the connection. This caused an infinite loop, since the first DNS entry it was encountering was never going to work; it would have skipped it when the connect() call failed, but then, the connect call wasn't failing.)
A lot of this article is quoting Musk about how difficult the Falcon Heavy was, much more difficult than what they expected.

There's certainly no reason to doubt him when he says it was harder than expected, but I do find it interesting that the Delta IV Heavy [1] has an essentially identical configuration and has been operational since 2004. Maybe that rocket had similar difficulties, or maybe the large number of engines on Falcon Heavy make a real difference (each Delta IV has one large engine rather than 9 small ones).

I guess I'm surprised that Spacex was surprised about the difficulty.

[1] https://en.wikipedia.org/wiki/Delta_IV_Heavy
You can write unreadable code in any language. "Look, here's some unreadable code in your language" doesn't tell us much of anything.

That said... looking at your first example, it's really not that bad. It could probably be rewritten to be quite a bit clearer, but even knowing nothing about the library or surrounding context, it doesn't take me that much thinking to work out what's going on:

We have a dictionary implemented as a sorted list of pairs, and a list of records we want to update that dictionary with (after some transformation).

If there are no records, we give back the dictionary unmodified. If there is no dictionary, we build one out of the records. If there is both a dictionary and a bunch of records, we do a recursive merge of the two - compare the heads of each list, cons the smaller on the result of the appropriate recursive call.
It's very annoying to see such a comment assuming that HN readership is all and only US citizen.

Sorry, that wasn't my intention at all. But:

Very exclusive of the other people.

It's not the US who's running the Great Firewall, remember.

I'd like to think we wouldn't tolerate such a thing here. I've been wrong a lot lately, though.
It should also do the reverse -- find links in wikipedia that aren't in archive.org and initiate an archival task.
The article's argument is perfectly valid if only some of these activities are zero-sum.
They already have it! The only difference is that the only party legally allowed to be awful and partisan is the Communist Party of China.
In the case of classic Mac OS it was part of the API.
I googled it, e.g. "Since 2014, the cost of completed packs has crashed from $400/kWh to below $200/kWh for some stationary storage systems, he says. Similar reductions have hit the automotive market. GM has said it’s paying LG $145/kWh for the cells in the 2017 Bolt battery pack." http://spectrum.ieee.org/transportation/advanced-cars/2017-i... Several other websites mention 200USD as the price Tesla pays for the packaged cells.
Well in 2008 Obama came out of nowhere and outspent Clinton even in the primaries.
So while it won't win you an election it sure can put you on the map. Trump is an odd case I'm not sure if the actual spending is truely accounted for, but he just seemed to get as much free press as you can.
Trump is also the first candidate that was really hooked into every social media outlet, and did so correctly so in effect they did much more with their money than the Dems.

In presidential elections the Democrats tend to tie or outspend the republicans, for congressional and especially local elections they seem to fall behind.
Summer School on Post-Quantum Cryptography 2017
Why do you care about the order of packages in Packages?

What does "build reproducibly" even mean in this context?
Sort of - the model it supports is not really multi-threaded. The modules can spawn threads, and acquire a "GIL" when they want to touch actual Redis data - thus only one thread at a time actually "owns" the entire Redis instance.

This allows long running queries to do primitive cooperative multi-tasking, releasing the GIL and letting other queries have a chance; But there is no real parallel data access. You will only gain real parallelism if you have actual work to do that does not touch the data directly when a thread is not touching the GIL. There aren't many cases that this applies to - usually copying the data aside to do work on it is not worth the gain of parallelism.
"That which _can_ be configured _must_ be configured.
Corr: defaults aren't.

(mine, inspired by WIndows 1.0 and it's only got worse since).
It's really big at my large (10k - 30k) state university in California.
I would think that something like hyperdex/warp[1] would be better for that use case.

[1] http://hyperdex.org/
[2] https://www.cs.cornell.edu/people/egs/papers/hyperdex-sigcom...
[3] http://rescrv.net/papers/warp-tech-report.pdf
It means each time you build the same code in a known setup, you get bit for bit the same binary. That allows you to assure that the code that's shipped actually matches the source code.

It sounds trivial, but the full paths and timestamps that get added at multiple points in the process are enough to screw this up, and those are the easy problems.
Yes, if you want to build a better webserver, go right ahead. But I think we're in agreement, that you shouldn't be reinventing wheels that you are not purposefully trying to reinvent. If we always started from scratch, nobody would get anything done.
How does the kind of reproducibility spoken of here compare to that offered by Guix and Nix?
Thanks for pointing. Yes it should be lower value to prevent over-fitting.
This a topic that also comes up in linear algebra. Is there any analogy between vectors and types, or is the terminology just coincidental? https://en.wikipedia.org/wiki/Covariance_and_contravariance_...
Be careful, they technically don't allow commercial transactions and will freeze your account (and reverse transactions) if they catch you. I got a stern warning after selling something on Craigslist and accepting payment via venmo, they must have figured it out by the note and lack of network of friends with the buyer.
If you don't want to be treated like a 10 year old then don't act like one.
I think it's a u-curve. Either you are hypervigilant about your personal information and security, or you relax and accept the inevitable.
I guess I'm too old. Have heard of Venmo but don't know of anyone who uses it. My friends and I trade off treating each other. It's fun, and no one is keeping score. I enjoy being generous.

I also suspect this author writes off anecdotal info, not actual data.

Take his comparison to libertarianism. Anyone who studies the actual political platform/ideology of libertarians know that describing it as "every man for himself" is a gross oversimplification. I'm not a libertarian myself but I know it doesn't discourage generosity or philanthropy.

Such lazy references make me think the author heard someone riffing about Venmo at a bar and decided to write rant.
Study: What is distressing about auditory verbal hallucinations?
At it's basic RAII is about re-using the a hierarchy of lifetimes (induced from the hierarchy of stack frames in as strict language) for managing resources other than memory.
Is hearing voices a cause for concern? That depends, study suggests
I think you're right, and to be more precise, that they are trying to create their ideal college town, a place that typically combines quaint shops with familiar big box chain stores.
How have I never heard of this before? (EDIT: oh, it's a really recent post.)

That list of bullet points hits hard. Bookmarked.

The name is excellent. It focuses on the work to be done, ties it to a traditional virtue, and jettisons the baggage that would otherwise come with references to earlier iterations on the theme.

Ditto that about the community being diffuse, although my failure to find similarly minded company may in part be due to the fact that I haven't figured out how to boil this all down to an elevator pitch. The "Autonomy" post helps.
> A new, more type-safe type reflection mechanism

Does this mean GHC does not erase types at runtime? Or perhaps what do they mean by "reflection" here; I only know it in the context of Java, where it more or less felt like an anti-pattern.
The Typewriter Insurgency
Why do you think frontend rendering is harder? Every time I see it, I'm happy because there's a nice API it relies on - I can grab clean, structured data from it rather than trying to extract it from the text.
Between Venmo, FB, Twitter, and now SnapMap it's scary how much you can learn about a person you've never even met...
So I used to think covariance and contravariance were related to covectors and vectors from physics, but in fact, our terminology is in fact confusing the concept (almost "opposite" actually) that is now accepted in math. (See comment on wiki[0]).

There we physicists go, confusing things again.

[0] https://en.wikipedia.org/wiki/Functor#Covariance_and_contrav...
> Could be a cultural thing

Also situational. When I was at university, if we went out anywhere, you'd just pay for your food/drinks individually. Now we're all in a position where money isn't as tight, buying rounds of drinks and not paying close attention to who's turn it is or the price of the drinks is much more common.
Right now, you can't even know the height or width of the terminal. So, I think you would need to start there.

https://github.com/vadimdemedes/ink/issues/5
Also, wouldn't be shocked to start seeing venmo exchanges being used in courtcases
Yes.

http://www.omscs.gatech.edu/program-info/admission-criteria
with NetBSD stating "As of 2017-02-20 we have fully reproducible builds on amd64 and sparc64." https://blog.netbsd.org/tnf/entry/netbsd_fully_reproducible_...
I'm not so much arguing for it as describing what actually exists now. There are hundreds of separate blockchain cryptocurrencies, plus a bunch of tokens built on top of Ethereum.

https://coinmarketcap.com/

Building a new currency on Ethereum takes about a page of code.
The Noble Art of Maintenance Programming
I can actually relate quite a bit to this. I waited somewhere between 1 and 2 years before setting up Venmo just because I didn't want to hook it up to my bank account. Only after seeing all of my friends using it did I finally set up a Venmo account.

If you don't trust Paypal, I can understand why you don't trust Venmo.
Dating for nerds (part 1): problem diagnosis
Just a reminder that Verizon its the biggest lobbyist against Net Neutrality[0] and if you do support it then it's probably wise to stay away from their services as far as possible.

[0] https://www.dailydot.com/layer8/lobbyists-net-neutrality-fcc...
It is clearly satire and a Monty Python reference, how can you be so wrong ?
Reproducible builds are extremely useful. There are more benefits. For example, suppose you have a build server compiling software packages. If your builds are not reproducible and you want to debug a core dump, but you have no debug information, you are out of luck (well, you could dive into the assembly code, but it's inconvenient). If you want to keep debug information, you need to store them for every single build (what a waste of storage...) because the binary for each build is different. Not so with reproducible builds, you could simply check out the old version and compile it with debug information!
Well it's not more awkward that the initial "can I have your phone number" or "can I add you on Facebook". You only do it once when you need it and never again.

Also, there's plenty of alternatives, bank transfers are usually the last resort. There's Revolut, Monzo, Ping It...

(UK perspective)
I find that rather hard to swallow. If you are trying to deploy PHP frameworks on your own there are a number of hoops you need to jump through on the server side to get things going. If you are using a deployment service, it's hard to beat things like Heroku and AWS ElasticBeanstalk for deploying Rails application.

I am definitely a fan of Ruby and Rails. So I am biased. But I have deployed my fair share of PHP and find it hard to imagine how it is easier.
"can we split for this case of beer?"

"can we split for this pizza delivery?"

"can we do an iou for my friend who forgot their card?"

"can we split this utility bill?"
Yes, you can solve it "by hand" in a few lines of algebra.

You can't solve Texas Hold'em by hand, though, because there are too many parameters.

The same technique they used there for RPS can be used on poker to create strong strategies
Yeah, it is beautiful.

Unlike their overcomplicated phone plans and billing statements which are deliberately obscure and their customer service which they run like a 2-bit boiler room operation.
Ok. But not even close to the way kids drink sugary drinks today.
Please review the existing literature on this subject. Particularly, take note that an Earth-normal atmosphere constitutes a lifting gas on Venus. This is not the game where you utter every trivial objection that springs to mind on the basis that no one has bothered to give the subject more than five minutes' thought. Your statement about surface temp/pressure is a clear indicator that you have not bothered to research this issue in the slightest degree, and this comment is an ineffectual attempt at saving face. The people publishing papers on this topic seem to think it's reasonable. Your sarcasm and ignorance on this matter are extremely offensive.
Probably variable. I've said a few times that I can't afford to go out, and had friends offer to pay (to be paid back if/when I can afford it), and it never really bothered me (I was extremely grateful to have such good friends TBH).

I did make sure to pay them back when I could (a few months later), and when I had a bit more money a few years later made sure to buy them all a few rounds of drinks though.
Two repositories with same content should have same metadata. For the same reasons we want reproducible binaries - to spot differences. (Also prevents useless re-download in some cases, I guess)
Generally you "abstract" betting to a few sizes (2-4 usually), and create a mapping back to real sizes when using the bot you created.
https://archive.is/Z5rsh
Odin, iirc, is for people who are more self-guided. Viking seems to be for those who need more help (mentors, tutors, etc.)
In the context of "reproducible builds", it means that if you compile the same source code with the same compiler and build system, the output will be completely identical, bit by bit. This is surprisingly hard to achieve in practice.

Once they have reproducible builds, they can easily prove that each binary package was built from the corresponding source code package: just have a third party compile the source code again and generate the binary package, and it should be identical (except for the signature). This reduces the need to trust that the build machines haven't been compromised.
Towards a measure of autonomy
That's a bad idea because you're likely to get scammed: http://www.slate.com/articles/business/moneybox/2015/09/venm...

Basically if you're doing a transaction with an untrusted person the time it takes for things to clear means you can be taken advantage of.
Roughly -- The value of an asset depends on who can use it.

When two parties agree to an exchange, it suggests that they both valued what they ended up with more than what they started with.
This was very interesting.

As a mathematician with no comp-sci type knowledge, my only understanding of inheritance is the "is a" rule. Using this, I realized that a subtype of the set of functions from Dog to Dog must be a set of functions such that each function could be treated as a function from Dog to Dog under an appropriate restriction. This would be the only way for such a set to satisfy what felt like the "is a" inheritance rule.

In other words, a set of functions from A to B where Dog is contained in A and B is contained in Dog would be a subtype of the set of functions from Dog to Dog. So Animals -> Greyhound works.