skysight-inc/HackerNews huggingface dataset:
Tell us how you really feel about ESR [1].

I don't necessarily disagree with your thesis [2], but this argument seems strange:

>Neither "enough eyeballs" nor "the right eyeballs" are a GIVEN, even for open source software.

and this argument:

> "Not enough eyeballs" (or "ZERO eyeballs" as he loves to claim) are NOT a GIVEN for proprietary software,

Are you an auditor of proprietary software or something? It almost sounds like you're arguing for many-eyes in theory, but you're saying that it's just as likely to benefit proprietary software? That is pretty bonkers to me. Even the 2-4 reviewers thing seems ridiculous, because open source software might be studied years later. In fact, companies trying to sell software analysis tools often fix bugs in open source software to demo their tools; something that they cannot do with proprietary software.

> Although detection of even deliberately inserted flaws can be attributed to Raymond's claim, the persistence of the Heartbleed security bug in a critical piece of code for two years has been considered as a refutation of Raymond's dictum.

I find it amusing that there seem to be this contingent of proprietary code proponents who insist that Heartbleed was the singular proof against "many-eyes". Since this particular security issue is the one thing that critics always point to, it almost seems like this is the exception that proves the rule[3]. Discussion also tends to leave out that it was discovered and patched by people other than the core developers because it was open source.

Closed source software security bugs don't seem to get pithy names because they're so common. If we're cherry-picking cases, how about Windows XP? Beloved software created by arguably the biggest, most advanced proprietary software developers at the time. There was a period of time when you could not turn a machine on for an hour without it being compromised. Or serious bugs that are trivially exploitable and are known about and not fixed for many years [4].

1. I think reasonable people would disagree with ESR about various opinions he has expressed. You really sound like you have a bone to pick though.

2. There is just as much diversity in open source software as there is in proprietary. I do suspect that truly bad code doesn't get used as much in the open source world as it does in the proprietary world though.

3. All software has bugs, DJB creations excepted. It seems like critics are saying "Ha! See! Open source has security bugs too!" No shit. Of course, in a black and white world, this could be considered refutation of ESR.

4. Not really an exploit, but this denial of service is one of my favorites because of how trivial it is and how badly it crushes old versions of Windows:

http://www.cvedetails.com/cve/CVE-2010-4669/

https://www.youtube.com/watch?v=00yjWB6gGy8

Edit: formatting.
You can skip the step of compiler fault by directly verifying machine code or by refining an algorithm provably into machine code.

This is what SEL4 people are doing.

The remaining part is verifying if your machine model is correct. Not trivial for some CPU and memory controller as complex as x86. (Even though just a subset of operations are used.)

Doing this also allows you a proof against fault attacks and timing attacks.
Except currently it is a concern:

> it remains on so that backup and B2 data can be uploaded and accessed

This is also why Amazon has tiered pricing between S3 and Glacier.
How does the language a company uses affect its online sales?
Thanks. Another question I got for you is:

What is louder? The fans or all the disks together? I had a workstation with 6 spinning disks and that was already quite loud.
It's 2017 and humans have built several anemonae, and we have several highly profitable firms that are built around these anemonae.

Their employees act as the stewards (clownfish) more as beings in symbiosis than as one controlling the other. We can neither understand or pull the plug on these creatures. Time will tell which species evolves more rapidly.
Slashdot was definitely instrumental to me buying mine. I never would have heard of Transmeta otherwise, and I found out about the Fujitsu through Transmeta's site.
It was less a intentional choice (early on at least) and more motivated by how painful using aim group chats for software development was. Slack wasn't even centrally managed for the early days of use.

(Although AIM itself started as kind of a unwanted skunkworks project, when there was an off the shelf solution available, people weren't that driven to build their own)
Anything that can be memorized can be trivially compromised. There's nothing special about an SSN in this regard. It's the protocol that's broken. To prove you know the secret you have to reveal the secret. PKE is the only solution to this problem that works remotely.
AutoMobility LA's 2017 “Top Ten Automotive Startups” Finalists
I did not realize that! Thank you.
They serve two different purpose -- the quick access only disconnects you from the Wi-Fi network / Bluetooth devices (all except Apple services / devices) and the settings toggle stops the radios whatsoever.

I'll again say it's not intuitive at all and it's not communicated well (if at all), but for us here that go the extra mile to research, having two separate such options is handy.
If I recall correctly, six digit icq id's were selling for thousands of dollars.
I never implied that 'people are idiots' - that's your ad-hominem.

I am however surprised that so many people think 'highest paid actors' == 'best actors'.

And yes, 'brand value' of an actor is absolutely 'superficial' to the nature of the film as a work of art - obviously it's incredibly important (the most important thing) to a big movie in terms of a business, which is why they are paid $$, and it's rather obvious from my comments. I don't for a second disagree with the decision to put 'Brad Pitt' in a big film wherein he might not be 'the perfect fit'. But 'Brad Pitt' is a mediocre actor at best.
It takes a fraction of a second to pop up (maybe a few hundred milliseconds).
You can't avoid the ads if they are presented as videos.

It's actually a cultural phenomenon of people making a living by buying toys and making you tube videos about them. You tube then pipes children's eyeballs to these videos.
I just started using Duplicacy with B2 and am very pleased. It's a bit more expensive if you have a lot of data (I do), but it's way faster, transparent and usable than their client.
Oculus Medium's 3D Surface Representations
Creating the Catalog, Before and After FRBR
... that's exact;y why I don't use Whatsapp - the mandatory total contacts slurp.
Whether or not it's a good thing depends entirely on us as a society. We can either decide to free people up, and give them the freedom to do things without having to worry about bills or where their next meal is coming from, a la Star Trek, or we can continue to put the same capital requirements on living that we currently do, and end up with the Hunger Games.
Same as others below I use it as a firewall and have used OpenBSD since it was available for my Sparcstation IPC.

Don't get me wrong - my lab desktop at work is Fedora 26, my little lab boxes are mostly running Debian Stretch and I'm an RCHE current on things like SystemD who has a ton of RH boxes I support day in and day out. But OpenBSD is very old school UNIX in its simplicity; there is no cruft in the base OS because it's really built for a few specific purposes.

There are downsides to running OpenBSD; it didn't win any packet shifting races versus other BSDs last I looked, but it is (arguably) the most secure of the BSDs and for a firewall it is undeniably otherwise fit for purpose. Any old $100 refurbished PC from Microcenter and a couple of Intel NICs are all you need to build a whitebox firewall with lots of interesting knobs.

Every time I upgrade I literally throw all my configs to a USB stick, put in a new hard drive and do an install from scratch. Copying configs back and looking for changes between the distributions is the relatively painless work of a couple of hours and forces me to make sure nothing major has changed either in behavior of or the software packages themselves.

If there's any downside to OpenBSD it is that it isn't newbie friendly... I call it a full contact operating system because some of the list members can be abrupt to folks asking questions found in the FAQ.
Best i can tell, they have basically hooked that up to the text scaling rather than anything like what you find on phones.
This post is not in response to just that post. It's important to take that post in the larger context of what Bob has said. He has many times implicitly (and some times explicitly) made the claim that typed languages are uninteresting because the type checker merely duplicates the work that unit tests accomplish.

As an aside, I rarely write unit tests, but I often use static analysis tools. I find that for the majority of the software I write, I get more bang for the buck with functional and integration tests than I do with unit tests.
here in the Seattle area (eastside) I see the AMZL being used for 1 day prime delivery, and traditional carriers used for "normal" deliveries.

I live at a difficult to find address (Fedex and ups often get confused) but amzl hasn't had a problem.

but they do always seem to deliver between 8pm and 9pm.
Panel discussion on contributing to open source [audio]
AIM will always hold special place in my heart. It had an ecosystem that allowed me to build two very successful (and profitable) side projects in 2002 and 2003: a Buddy Icon generator and a database of Witty Away Messages for AIM profiles that eventually grew into a little social network. BRB.
It is much more likely that the fault is due to corruption during data transfer anyway and you get to handle this case.
For me, the big sell in Atom's git integration is seeing exactly which lines have been added / removed / modified in the gutter and the minimap, as well as seeing what branch you're in displayed in the status bar. I didn't use any of its other git integrations.

Sublime Text can handle the former with the plugin GitGutter. Atom's branch reminder is a nice-to-have but not something that I feel is necessary, so with the plugin I'm a happy camper with Sublime.
Yeah just confirmed by removing the addon. The url shows up but only after an annoying delay and an animated fade-in. Ugh.
I've read this book, and what I love about it is that it really brings to mind the programming books of my youth, when nobody would argue that programming should be fun.

It's goofy, has bad jokes, and you learn something.

Having said that, the code style seemed quite idiomatic compared to some of the other Lisp I've seen (although I'm no expert), so I wasn't sure how valuable the lessons were.
How to make recess last forever: a children's book about entrepreneurship
honest question, why would anyone use an in-browser screenshot tool when screenshot tools already come pre-installed in basically every operating system?

can Firefox's screenshot tool be disabled? I'd like to switch back from Chrome due to Big Brother concerns but not if Firefox is making questionable choices like this.
Heh, good point. That makes it even more baffling. A CS professor should know better.
Costco is rolling out new delivery services to compete with Amazon/Walmart
If you have an Android phone, a good demonstration of flutter is the gallery app:
https://play.google.com/store/apps/details?id=io.flutter.gal...

There doesn't seem to be an equivalent iOS app, which is kind of strange for a product whose whole purpose is cross platform development. But maybe it's not allowed on the App Store because it's alpha or just a demo.
That's a pretty large file, especially for early 2000s standards. I'm guessing DivX?
They did have the choice to not ship the increased sandboxing, multi-process architecture and performance constraints until three months after the new extension APIs were ready. They didn't because they thought the trade-off wasn't worth it.
Using “code” indentation for quotes is completely unreadable on mobile. Just use asterisks to italicize.
The problem here is that: "a market shared by a small number of producers or sellers" is "a state of limited competition."
https://addons.mozilla.org/en-US/firefox/addon/tree-style-ta... has a 'Compatible with Firefox 57' badge, and I've been using it with no issues.

I've always been satisfied with the built in session management (restore last session on open) and don't have any feedback on the other.
Ah, so we should abandon capital investment and revert to nomadic lifestyles, where swarms of people wander the landscape looking for work.

They should be investing in their own caravan carts, rather than paying $300/month for just enough floor to throw down a mattress? Like Roma (Gypsy), Irish Travelers, or hoboes? Yes, those are all cultures valued well by the landowner class.

You can't solve a regional problem by depopulating the region. You'll just end up with the same problems in the neighboring region.

And in the metaphor, the fish are gone. As in extinct. Coal mining is dead. Natural gas extraction and green energy killed it. People still working in the industry are the isopods picking over the carcasses. Eventually, they will get down to the bones, and they too will have to find something else to eat.
Costco launching delivery service. Is this end of Costco. Will this decrease their store foot traffic? I think so. As they say, disrupt yourself before someone disrupts you. Costco knew Amazon is coming after them.
Having one's work discussed by the supreme court is pretty incredible. It might just be a way to continue the conversation and raise awareness of what is undoubtedly a pretty obscure subject, that you've dedicated a significant part of your life to.

In that respect, "there were some misconceptions" seems to be the link-bait, white washed with integrity and civility.
ARM support?
(disclaimer: I work on the Flutter team)

> What do I see when I'm running an older native version?

You will see exactly the pixels that your designer intended and your developer coded. :) Apps built with Flutter ship the renderer and framework inside the app, which helps ensure consistency and fidelity across devices, OEMs, OS, and platform. This is particularly important for brands that want a brand-first design delivered consistently to all their users. Hope that helps!
This is sort of a silly argument.

While the average/composite justice might ask devil's advocate questions, most the coverage of this issue is also taking into account the individual personalities and histories of the folks asking the questions.

So, it means something different if Justice Ginsburg asks a question vs Justice Roberts.

In the age of Trump, I think it's far more dangerous to assume politicians and judges don't really mean what they say, than for this author to vigorously defend his work and opinion.

Having read the article, it's clear that Alito represented a fundamental misunderstanding of the author's research. It would be irresponsible for him not to respond and clarify.
> Compare general comparison sorts with counting sorts for a simple example. The latter require additional properties on the value making them much less general, but you gain major performance benefits.

In theory sure, but I've never seen anyone use a counting sort in production code.

> You have to verify all required properties anyway or you end up in a similar place.

You go from n * m to n + m though, and since the properties are often simple and standard they might be done for you in the standard library already.

> Generic does not mean general, but programming languages do not have an easy way to verify properties so you end up with general.

Typeclasses give a reasonable representation; newer languages let you require their properties to be verified if you really want.
> financial markets are the first rogue AI

How about this idea: the first rogue AI was language.
In terms of AI as a compositional system for storing meaning, I think this might be a reasonable position to take. Yes people, we've been playing this game for a very long time...
No, but maybe I should. Thanks for the tip!

One of the things I hate about the native TS extension is that it disables tab-completion in TS files. I wonder if LSP fixes that.
The institutions that want to verify your identity should be their own CAs.

If I were implementing a replacement for SSNs, I'd send out certs rendered as QR codes by physical mail. That's not perfect, but it's at least as secure as the current practice of sending out UIDs by physical mail. At least the is the possibility of getting the key safely inside a secure device and destroying the original. With the current protocol, in which the only way to prove you know a secret is to reveal the secret, it's completely hopeless.
This is a mentality that is making its way though the whole of consumer IT, even the FOSS world is not immune in their chase for marketshare...
Show HN: Resume Worded – Write impactful resumes
When NOAA's site gets hit with heavy traffic, the static image cone projection tends to hold up a little better: http://www.nhc.noaa.gov/storm_graphics/AT16/refresh/AL162017...
Brian from Backblaze here.

> I thought B2 was like S3

It is. Backblaze actually has two separate product lines:

1) Online Backup for $5/month/computer where you have to use our client we wrote with all of it's policies. This is widely targeted at "ease of use" type customers. There is a free feature inside of "Online Backup" called "Groups" where one person can pay for many others. You can use this for a business, we absolutely do NOT charge differently just because it is a business. Or you can use "Groups" to pay for a family, or whatever. "Groups" is free, we honestly don't care if you use it or not.

2) Backblaze B2 - this is "object storage for half a penny per GByte per month". There are MANY clients available for you to choose from, you can see a list on this page: https://www.backblaze.com/b2/integrations.html The idea here was many people kept approaching Backblaze saying they needed to store stuff cheaply, but didn't want to use our client, or maybe it wasn't "backup" they needed but to host live images on a website on the internet, stuff like that. So we built an API anybody can program to. https://www.backblaze.com/b2/docs/
I use it to run my mailserver (OpenSMTPd is awesome), among other things. It's also my default OS for non-x86 desktops/laptops (it works remarkably well on PowerPC Macs).
Yev from Backblaze here -> We have relationships with manufacturers but don't directly buy from them (yet - fingers-crossed). It really is a combination of price/reliability. At our scale we can afford slightly higher failure rates if it means less expensive drives, so our #1 data point for purchases is the cost per gigabyte. After that we do look at failure rates, but unless it's something wildly out of "normal" we tend to live with the occasional failures. Thanks to Vaults the back-end is designed in such a way that if a drive fails we don't have to run and replace it - so individual failures tend not to stress us out too much anymore!
As a native mobile developer of several years, I've always been somewhat skeptical of the various cross-platform solutions that have emerged over the years.

The WebView-based solutions weren't fast enough and sometimes behaved differently across devices because of different WebView versions. With React Native, the impression was far better because the performance actually can be quite good. But it's still hard to abstract the UI layer away when even the native Views on Android behave differently across devices and Android versions. I had to use almost a half of a day for fixing invisible drop-down menu items on some specific Samsung device on Android 4.1.2. Not to mention when you have to abstract the UI for both Android & iOS, which brings its own set of problems. It's one of the reasons why such a fundamental thing as navigation has been so hard to get right.

I feel Flutter is the first cross-platform SDK that gets something fundamentally right. Since every pixel on the UI is rendered by the framework, we as developers have better control of everything. It's going to have much better performance because there are no bridges between native and cross-platform land. Additionally, Samsung can't fuck up our UIs: once the UI works, it works the same on every device.

As a bonus, they also keep tremendous care of their codebase and they have the best documentation I've ever seen. My really simple, quick 4-line fix didn't go through until I wrote 30 lines of automated tests to go with it. After all, Flutter is going to be the native SDK for developing apps for Fuchsia, and I think Google has learned not to repeat the same mistakes that happened with Android again.
> Except you're going about it the wrong way. We've eaten simple unrefined foods for as long as society has existed.

Yes, and the average life expectancy was much much lower.

> I've taken the logical and scientific choice to stop consuming these foods.

There's nothing demonstrably scientific about the choices you;ve made other than a distrust of anything that's been innovated in the last ~8,000 years if you're talking about hexaploid wheat.
You sure? I think that was fixed with a WatchOS update (probably 2, but certainly by 3).
You should tell the interviewer the truth, but you'll feel confident denying due to lack of proof when a random person makes the claim.

If anything, it makes an asset vulnerable to extortion _from_ the FBI.

See also "The FBI Is Struggling to Hire Hackers Who Don't Smoke Weed". [1]

[1] https://www.reddit.com/r/news/comments/262dde/the_fbi_is_str...
Your own is as well. You make a strong claim without proving it.
> In the west, the idea has had a profound cultural impact. Peter France explores this in his book Hermits, attributing the creation of monasticism to the example set by the earliest Christian hermits, the Desert Fathers of Egypt.

I'm curious why, given this little bit of insight, he never sought out any hermit monks? I personally know of an Orthodox Christian hermitage in Canada that's the real deal, not to mention there's plenty of Orthodox hermit monks in places like Greece, Russia, Romania, Egypt, and elsewhere... Not sure if there's any true Catholic hermit monks, but I'd guess there are. Instead we get this fluff piece about visiting an angry, drunk man who wanted to escape society, and obviously just became crazy rather than gaining any sort of insight.
Sam Harris said it well, "We spend our entire life seeking out pleasure and avoiding pain."
In my opinion if you are going into solitude for avoiding pain - the pain will continue. Like others here have posted: your heart (emotions, thoughts, etc) follow you.

There is a show on Youtube by BBC _Extreme Pilgrim_ that is pretty good first hand documentation of solitude in 3 different traditions or flavors. Think the guy spends 3 weeks in each location in solitude.

I believe if I were to start this sort of exercise I would attend some sort of Vipassana retreat. This way I would have some framework for managing thought. I could not imagine going out into nature and having mind relentlessly "work its way through things".
In 1999 people didn’t know what email was? How old were these people? Honest question. I’m extremely surprised by this claim.
Ironically you possibly need WiFi (since siri operates remotely) to turn it off.
The security rabbit hole never ends. I did not mean to imply that an internal check is a panacea, only that it might be a cost that some not-entirely-unreasonable person might be willing to pay in certain applications. I was just pushing back against the glib dismissal of this countermeasure as "unworkably slow."