skysight-inc/HackerNews huggingface dataset:
I don't recall being at, or working with, a company where this wasn't _the_ reason patches were delayed at least some period if time.

Companies are driven by profit; unknown patches can negatively affect profit and are usually treated as such.

Alternatively, there are sometimes political reasons. A director may not want to risk an outage for fear of being dressed down by their VP.

Any change to a production environment comes with risks, sometimes having a security risk is judged to be lower risk than making a change.

I've seen this from small startups to multi-billion dollar companies.

Ignoring these factors is also putting your head in the sand.
It's nice to see that some newer languages like Rust and Swift are performing well!
> It's also a business decision. You need to invest staff time in testing and automating said updates, and will inevitably lead to more outages.

There are many vendors attacking this exact problem from many directions, including my employers[0], but pretty much every platform vendor has something here.

I do agree that automation and risk are at the root of the tension between security and stability. It's a feedback loop that can run in two directions. If you embrace stability, the loop becomes "no changes ever" and security becomes much more difficult to achieve in practice. If you embrace security, then at first you face instability -- but embracing rapidity and building out tooling for it makes you both more secure and more stable in the long run.

> But its not like actuaries have a lot of data to model to the point of accurately imposing a cost per day of unpatched CVE.

I'd be interested to know if this is actually true.

I recently got interested in the FAIR risk modelling approach. It requires a bunch of legwork, so in practice it won't catch on without determination to use it or something like it.

Usefully it breaks risk down into more easily-estimated, easily-tracked subcomponents[1]. "Probability" becomes "Loss Event Frequency", which further breaks down into Threat Event Frequency and Vulnerability, these break down further in turn. Similarly, the usually-vague "Impact" becomes Primary Loss and Secondary Loss, each of which has 6 specific types that can be estimated. Those estimates can be based on available data, whether your own or industry statistics.

> Worse, many places have competitors, and if they're choosing to take on risks in the name of lower prices and higher market share, the customers of your secured app walk out the door.

[0] I work for Pivotal. We've been building towards the vision of "Rotate, Repair, Repave" in Cloud Foundry: https://builttoadapt.io/the-three-r-s-of-enterprise-security...

[1] https://cdn2.hubspot.net/hubfs/1616664/The%20FAIR%20Model_FI...
“In the future...”

We are having one of those conversations about the future with current technology at current prices? Again...
Sorry to nitpick, but Zope and Plone were not the originators of Python eggs, although they may have popularized them.

The design was done by Phillip Eby, with funding from OSAF for the development of Chandler, not Zope.

Much shade has been thrown at eggs over the years, and people bemoan the warts, but eggs and setuptools were better than what we had at the time in Python.

https://pypi.python.org/pypi/setuptools/0.6c11
To be fair there has been somewhat of a shift in certain industry sectors. Some gaming companies finally recognized the importance of 60 fps gaming for many people, PS4Pro giving the user the option to choose between eye-candy or responsiveness is a very good thing to happen, with PC gaming there's been quite a boom with high-fps gaming with supporting displays becoming more affordable.

VR put latency on the general radar for many people previously completely oblivious to the issue, imho another good thing to happen.
The article is brutally correct and fair.

She presided over a total security flop

This means she had no job being a chief security officer.
A modern phone actually makes a good attempt at replacing:

Notepad

Telephone

Letter post

Still camera

Movie camera (not common in 1957)

Security camera monitor (needs external hardware, but still)

Audio recorder

Cinema

Library

Music collection

Games arcade

Map and navigation system

Magazine and newspaper stand

Store catalogues (concierge shopping, to some extent)

News and weather on TV

TV (partly...)

Job search

Travel guide

Restaurant and hotel finder

Flight booking and checkin tool

Business memo distribution system

Classroom toys and child entertainment

Textbook and trainer for older/adult students (limited, but hardly non-existent)

Quick notes for friends and family

Clearly there's quite a bit more value than just "information delivery."

Source data doesn't need to be absorbed. No one in 1957 seriously expected readers to memorise the written text of newspapers or magazines, and no one seriously expects Facebook or Twitter users to memorise entire feeds today.

So the actual volume of useful information consumed daily has increased by a huge amount, and it's presented in a far more accessible and interactive/participative form than it used to be.

The point is that mobile devices connected to an open public data network generate huge economic synergies. Processing speed and memory are far less relevant than automation of old applications and the development of whole classes of new applications. Both have literally been transformative.

As for liberal democracy and journalism - those are no more endangered now than they used to be. Technology is a social multiplier, and if the roots of a culture aren't sound media of all kinds will reflect that - but that's a political problem, not one caused by technology.
If your primary metric for good software is {speed,memory use,energy efficiency} then yes.
Wearing earplugs for long periods of time is seriously uncomfortable, plus it doesn't do good things for your ears (it can cause wax plugs to build up).

I'm only willing to wear them when I'm really desperate for sleep and I'm in a loud place, or to prevent hearing damage. Neither is an everyday occurrence.
Chance to Win $1000 Free Ad Credits for App Developers
I would think many countries have disused mineshafts that might be good candidates for a far longer drop
Again, this stresses the need for clear communication.

> Beginning today, all official Caddy binaries come with an End User License Agreement (EULA) that designates them either for Personal (non-commercial) or Commercial use.

They probably could have clarified this by saying "Beginning with version 0.10.9" instead of "all binaries".
That's why I stopped selling tech.

I say I do mobile apps and not React-Native apps.

Maybe I do then NativeScript next year or PWAs with Angular.
Well, it does have a type system, but it's arguably the weakest kind of typing among all mainstream languages.
Sums up my interpretation of his writing, which I was forced to digest at uni.
On a broad scale, yes. But it also proves that the efficiency of particular languages depends on the problem at hand. For example, if your problem is searching for a pattern in large strings, a simple Perl program using the builtin regex support will easily beat a C/C++ program that hand-rolls pattern matching, because Perl's regex engine has been optimized for over two decades.

On the topic of mobile devices, I recall the Nokia N900, which ran mostly C and C++ software. Its UI performance was comparable to contemporary smartphones even though it only had 256 MB RAM and a single-core 600 MHz CPU. (Of course, a major part of today's phones' slow UI is all the bullshit and spying that apps are doing in the background.)
They are the owner of the copyrighted content (the game imagery). They revoked permission. Thus it was being used without the owner's permission. The DMCA request is perfectly valid.

That said, they still should have provided him with notice before filing the DMCA takedown request.
If you really want a private office, there are a couple of spaces available right next to mine for $225/month each - http://www.klopferbuilding.com/ ;)

Obviously you'd need to live nearby (Northwest of Dayton, OH), but houses here go for ~ $120k - https://www.redfin.com/city/16281/OH/Pleasant-Hill

You could literally retire here and work on whatever you what with a few year's worth of bay area salary. (Which is, more or less, what I intend to do.)
I hope C/C++ programming picks up again.
perhaps one should link to this thread instead https://mathoverflow.net/questions/227713/estimating-the-siz... ? When it comes to Math, the quality of discussion on Quora is usually much lower comparing to on Mathoverflow or artsofproblemsolving
Linux and Darwin is written with C. They are the OSs of Android and iOS.

But would be nice to have some mobile apps written with C.
> While many people are more comfortable alone, you are part of a team and not just a coder. I find it selfish for people to feel their alone time is more important than learning how to work as a team.

I can't imagine a project which would justify so much "collaboration" that you have to have everyone in the same room, next to each other, all the time.

If you design your project right, you end up with each team member having a well-defined piece of work isolated behind (broadly understood) interfaces, so for most of the time they can do their actual work alone. You can do meetings and design sessions and watercooler chats to sort out what has to be done and what is the division of responsibilities, but at some point people need to actually sit down and write the code. This is a lone-man job (barring pair-programming). If you need to constantly "collaborate" while coding, you're doing something wrong.
I gave some examples of common use which contradict your claim.

As for dictators, they are violating international law. Abortion is legal in the US (withing certain parameters), and international law does not declare it to be illegal either.
Cleaning My Old Atari 800XL
Legal assistance in the company restructuring – R and E
> No real company can do this.

They can, but it requires automation. I've worked on and used tooling for just such things. We can see an upstream CVE and have it patched in production inside 48hrs. Usually the same day.

Disclosure: I work for Pivotal. All this stuff (Cloud Foundry, BOSH etc) is opensource, but we sell commercial versions too.
First line of fastai imports is a big "Fuck you" to usability. Don't import *.
Yes, I'm very aware of our license.

It allows people to link it in their non-free, proprietary software without any vitality on that proprietary software. It still requires them to make the source for the version of libgit2 that they are using available upon request.
After New Times Story, Motel 6 Says It Will Stop Sharing Guest Lists With ICE
I agree; if your commits are poorly planned and poorly commented, then I don't see any particular reason to avoid squashing them.

But if your commits are poorly planned and commented, I would recommend trying to improve them, rather than reveling in the fact. ;)
iXsystems Inc. is offering jobs to Sun/Oracle Refugees
Dupe: https://news.ycombinator.com/item?id=14629414
How does it compare to zero-G planes (vomit comet)? These planes can provide much more than 10 seconds of weightlessness, do it a dozen of times per flight without exceeding 2g of acceleration. Much bigger volume, much bigger payload, people can use it, it looks better in every aspect. By comparison, the drop tower can do three 10-second experiments per day, and the acceleration/deceleration look quite violent.

If you want to get in and have a trip, it costs around $5-10k. So judging by this price, it doesn't seem that the expense is high enough to justify building an apparatus that looks quite expensive.

I'm sure that there is a very good reason for drop towers to exist, I just don't know which one.
Renault-Nissan lays out plans for electric and autonomous vehicles
Not free (some of the intro videos are free, but most are not), but egghead.io puts out some excellent material. I am pretty good at js stuff, but I keep my membership as the newer content is kind of a discovery thing (learn about things I might not have otherwise seen because a series of videos popped up on egghead).
Have you not worked in smaller companies? Economies of scale apply in myriad situations.
> Some highlights:

Mahler was antisemitc. Pope was sexist. If you judged works of art by who the author is, then most works of art would be viewed as rubbish.

> HDT is not one of them, IMHO.

Just because you disagree with his ascetic and "anti-social" lifestyle doesn't mean he wasn't a great writer. Walden and Civil Disobedience are easily some of the most important and iconic writings in american literature.

Many of the great writers are eccentric. You can't judge works of art based on who the author is.

The amount of anti-intellectualism pushed by the social justice left is rather alarming. If HDT wasn't a great american writer, then there is no such thing as a "great american writer".

I just had a debate the other day with someone who claimed Mark Twain was a terrible writer because he used the N word in his books. Now I have to defend Thoreau? What's going on here?
Well, Rust and Go are performing very well. Swift performs worse than languages like Java, Haskell, OCaml, C# and Lisp.

-- Edit --

My bad, I only looked at the paper. The results (https://sites.google.com/view/energy-efficiency-languages/re...) show that Swift and Go are doing about as well as Java. (Which means they're right behind C, C++, Rust and Fortran).
A secure captive portal browser with automatic DNS detection
Companies like Red Hat, Suse and Ubuntu provide security backporting for exactly this reason. It's one of the major reasons that folk subscribe to them.
At work, I currently sit in an enclosed room that fits eight SWEs, all of whom are on my team. We have sliding glass doors on the room that we only use when we're having our stand-ups so as to not disturb the people outside the room. Incoming noise never seems to be a problem. All of the conversations I overhear are from my team members, and are thus relevant to me. I also have my back facing a wall. I consider this a near ideal working environment, even better than everyone having private offices, as that seriously hampers spontaneous discussion.

In another month we'll be moving out from our room into the general open office seating area, which I'm not looking forward to. It's not even the noise that bothers me, it's the raw animal insecurity of having things going on behind your back. I get horribly distracted in a big open area when people are moving around behind me, and I thus can't concentrate effectively. I also feel self-conscious about what others can see on my screen, and can never relax. I feel a low-level anxiety from it throughout the entire work day.
Steps to Fight Ransomware – A Step by Step Guide
Patriarchy is a conspiracy theory popular in coastal parts of the US.
We've come a long way since then. We are super close to 1.0 now and while the API hasn't changed much, there have been numerous breaking changes and we've also added new features, documentation, examples and seen the ecosystem grow too.
Picks up? C/C++ never went anywhere(except you know web stuff).
For me that feature has been worth every penny. I'm constantly getting emails; if one comes in after business hours, 95% of the time it can wait until the next morning. But 5% of the time it can't, so I've always got to pull out my phone to check. With the watch, I can just glance quickly and go back to whatever I was doing.

(I'm somewhat resentful of journalists always interjecting the narrative in articles about the Watch that it's an underlying symptom of people being addicted to their phones. For a lot of people, being available is part of the job. The Apple Watch is the modern equivalent of a pager.)
Yes. A few years ago I invested in the Bose QuietComfort product. I slap them on at the mere hint of a distant conversation or sound that will break my train of thought.
It isn't sufficient to just have a deep hole in the ground. You need a vacuum too!

I had to poke around to find this: "Before the experiment, 18 high-performance pumps make sure that the drop tube is almost free of air containing only one ten thousandth of the normal air pressure. Due to the vacuum, the air resistance is so low that the Bremen Drop Tower can provide one of the best quality of microgravity - in some aspects even better than on the International Space Station (ISS)"
"Drunk driving" is also a horrible category of crime, popularized by odious moral crusaders in order to raise money from parents they terrorized. Its primary role is to act as another input for the "justice" system treadmill to which we chain the working poor.
Any examples of what you find terrible?

Ever tried magit? I don't know if you'd find it terrible, I find it not so bad.
I'll save you a click. Cost savings.
Yes. Became very confused attempting to solve for all three fractions = 4.
> raw animal insecurity of having things going on behind your back

Finally, someone else who gets it. When I've mentioned this, people tend to assume it's just about what's on your screen, but that's really not the heart of it.
Steve Jobs saw a productivity increase when he was at Pixar according to Ed Catmull's book (Creativity Inc.)

The problem is that what Mr. Catmull described as open space for creative people to let them mingle and bounce off creative ideas. That's the whole premise of an open office space.

Now, programming can be a creative field, but most of the time when I code I'd like to be quiet around me. If anybody distracts me that's an instant 15 minutes loss (at least) of whatever I was doing. At least for me.
The uncompromising debate at the core of the Harvard-Chelsea Manning controversy
The Tesla data recording sounds great on paper, but despite all that hypothetical data Autopilot still can't stay in its lane: https://www.youtube.com/watch?time_continue=2&v=ALEMd9WZJtE
AT&T has some areas on native dual-stack now. I gather they are working on moving away from 6rd.
On the other hand, you can get amazingly well fit ear buds for a hundred or so, and the stuff the doctor uses to irritate your ears costs like $8 over the counter....

My biggest gripe is I can't combine it with over the ear stuff for too long cus it presses my glasses against my head too hard.
304 requests are so tiny that you probably end up in the order of 0.01%.
Before all of you go out taking these results as definite truth, remember that a language benchmark is only as good as the particular implementations. A $LANGUAGE fanboy can easily game the benchmark by overoptimizing the $LANGUAGE implementations into unmaintainable atrocities that perform extremely well, thus making people think that average $LANGUAGE programs will exhibit the same performance/efficiency/resource usage characteristics.

There's no easy way to guard against this problem when you're only a handful of researchers. If you have a large team with a background in a lot of languages, you can have them write and peer-review implementations that are idiomatic (i.e. representative of the language's practical usage).
At the risk of getting into a completely different debate, the iPhone is not a computer. A computer allows the user to write and run any program of their choosing. An iPhone can only run programs approved by Apple, and the user cannot use the iPhone to generate new programs.

So while technically the iPhone is a computer, with a microprocessor that executes instructions, primary and secondary storage, and so on, the device has more in common with the traditional telephone and television, because it can be used for communicating and consuming content, but not general purpose computing.
No one is forcing anyone to release an open source project or make anything available for free. It's a choice. There are entitled, selfish and extremely immature users but also projects.

Open source users frequently put up with extremely poor products in the beginning and help them mature and grow.

In the case of users some are frequently on HN itself complaining if a project repo on github is not updated in a week. There are startups who are successful who let alone give anything back to open source projects do not even properly acknowledge their use. This is hand waved away on HN when it should be the leading force of change against this kind of self serving culture.

Users pay you with their attention, that is the currency of open source and adds tangible value to your project in the beginning when you have no users. So projects like Caddy have been paid and validated by their users which enables them to now make a commercial push.

Once you gain traction you can't suddenly change the rules of the game and change the narrative to 'free' and 'paid' users or 'developers' and be dismissive of users who supported you.

Yet when even projects like Debian dismiss users to focus on developers now that they have traction, nevermind a project without users has no reason to exist, its not surprising this is the predominant dismissive attitude in open source towards users.
Maybe lesser known than the cases presented in the article, there is a very similar case with more serious implications than some press misinformation or copyright infringement:

http://rodrik.typepad.com/dani_rodriks_weblog/2012/10/did-mi...
The article links to a previous article on the local impact of the campus that is also interesting: https://www.dezeen.com/2017/06/13/apple-park-new-campus-fost...

Edit: clarification
This is not a case of Christian persecution. Good for you, you are part of a liberal Christian denomination. But there are more than 100M Christians who strongly object to abortion on religious grounds. In most states in the US, there has been a terrible erosion in the ability to get an abortion, and this is due to political leveraging of the issue with Christian support.

http://www.pewforum.org/fact-sheet/public-opinion-on-abortio...

70% of evangelicals are opposed, while 44% of Catholics are. From that you might conclude that since the majority of Catholics are not opposed to abortion that proves your case. That would be wrong. The church and those who oppose it are far more vocal and influential than those who support it.

Really, this topic is in the news all the time. I don't know how the religious connection has escaped you.
what bugged me about their pricing model (perhaps it's changed?) is that things people share with me count to my cap. I had a client share stuff with me via dropbox. So I signed up. I get "2 gig free!" Yay. Another client shares stuff with me. Then another. Then another. Then I'm at my 2gig cap with just other peoples' stuff. They all think it's great, because none of them are paying for it. I needed to pay money to support their free use of the service, and I declined. Just one more $x/month service I didn't need to get hooked to. Maybe the pricing model has changed what they count now?
> active noise cancelling over earphones

Some folks cannot wear those without discomfort or dizziness. I tried them out an fell into that category (I have some ear issues) which is damn annoying because my brother loves them for airplane rides.

Right now, I am in an office with my back to a window that looks out to insulation[1]. I'm pretty comfortable programming away.

1) they added a building expansion where my outside view was and we haven't gotten around to replacing the window with a shelf. I think I might add a moonscape, grain field, or some historical reservation appropriate image.
My thought exactly, nature of many organizations changed when they moved to new fancy offices. Being in crammed offices, sharing and collaborating with your colleagues makes things special.
It's not just the noise. You as a human are wired to process movement around you. This takes mental energy.
http://pcdb.santafe.edu/
Foolish activities, like hiking above treeline afternoon in the summer, greatly increase that risk.