skysight-inc/HackerNews huggingface dataset:
The Accessible Icon Project
Civil engineers don't I suppose agree to build a bridge before they've surveyed the land and then begin construction before knowing the loads.

Contrast that to software engineering, where beginning before you have requirements is seen as a requirement of being agile.
There used to be a homescreen replacement app for Android called SlideScreen [0] (homepage is active, but the app is abandoned) that would try to give you as much information at-a-glance as possible.

[0] http://slidescreenhome.com
Hmm, I'm in the opposite boat - China can't extradite me or arrest me. I'd much rather my information be in the hands of Chinese intelligence agencies than American ones.
Can we start sending it dummy data to make it useless?
The Christian standard of appropriate punishment for even the smallest transgression is burning in a fire for eternity.
Don’t be ridiculous, journalistic ethics are just what’s convenient in the long run for journalists.
Including the response of JHH in the comments again.
Start here and follow links:

https://www.vox.com/the-big-idea/2017/5/18/15655638/charles-...

(This only looks like a Vox article; it's actually an open letter from authoritative researchers Vox happens to be publishing.)
System Shock: How a Cloud Leak Exposed Accenture's Business
The Librem 5 just passed its crowd-funding goal[1]. That's what I'm getting for my next phone.

[1]: https://puri.sm/shop/librem-5/
In school, and now out of school - I keep the same routine. I work 50 to 80+ hours a week programming, emailing, etc.

Primary, Ive worked a full-time job as (senior) software engineer and on the side (as much as a possibly can get away with it) building businesses for the last year of college + the last three years. During that time I never once took more than a single day break from coding. That is four years with no vacation / adventure.

I coded after everyone went to sleep, on planes, trains, ships, etc. Believe it or not I'm also married and have a fairly active social life.

I found that traveling, and working makes it possible for me to see things I otherwise wouldn't. I also noticed that changing up my scenery made it possible for me to be more productive. Might not be like this for everyone, but I'm more invigorated when new stuff is going on. It keeps my brain on point.

I should note, that since then I took my first real vacation in four years. It was two weeks doing w.e., traveling with my wife. Honestly, it was awesome to be away. That doesn't mean I don't bring my work with me now (as perhaps I'm overly ambitious), but I do intend to unplug now for at least two weeks every year.

However, I can see how this guy would be able to travel and might even be more productive if they do it right.
>the casual dismissal of coding errors as another cause of failures makes me question where this "expert" has any idea what they're talking about at all, thirty-six years or not

They don't dismiss them casually. She dismisses them because of actual experience on not having seen those matter much for 36 years, in all kinds of scenarios where she was explicitly looking for such things.

>There is a reason that Tony Hoare called inventing null references his billion-dollar mistake!

Which is neither here nor there, as in the domain we're she works, they don't allow those mistakes to go through to begin with.
"casual dismissal of coding errors as another cause of failures"

It'd not casual dismissal. What she says that despite how good a job developers do, not understanding the basic domain where the software operates will lead to a failure in production environment.

Which, really, makes sense. Requirements drive the test envelope. Generally, people try to test the product they are releasing - but if they do not foresee a testable scenario then that is not tested.

The best way to let bugs slip through is not to test against them.
I think today's machine learning algorithms mimic more evolution than they do how humans actually learn. I think current techniques in machine learning however can one day teach a machine how to learn by building a fixed neural net that has memory that is the learning algorithm.
Go to Scotland and enjoy your freedom to roam :)
I don't think this is legal in the EU. I suppose somebody has to complain to the correct commission or sue to find out for sure though.
What, like in Law & Order?
You have to do both. When something unusual comes up it is good to file it away as a possibility. To be fair these have ways been "obvious" on pentests. When you start from the point of all input is dangerous, how can I abuse this one, it becomes the logical conclusion to put in an Excel formula. That is your point, I think. But my experience has told me some inputs are just assumed safe, even by developers that program defensively. So you have to embrace both IMO.
I too thought that - especially given that it's (I think) a well known phenomemon: https://en.wikipedia.org/wiki/Microwave_auditory_effect
Why I learned to code instead of pursuing a career in finance
This makes me wonder: why can we have a top of the line desktop PC which is totally libre, but not a smartphone? What has gone wrong?
Use ARRAY in Java
I'm curious how OP would prevent the Therac incident through type systems...

Key quote: "Previous models had hardware interlocks in place to prevent this, but Therac-25 had removed them, depending instead on software interlocks for safety."

Or even better how type systems could work around data integrity errors in RAM without ECC.
> No, but not liking type systems might be an intrisic property of some programmers

I wish they'd stop writing shitty, ad hoc type systems into our production code, then.
> ...if we spend enough time and money on it.

This is a much deeper thought than it's getting credit for.

The tools and discipline are all there. People just don't want to spend the money for them. Developers and their leaders don't get raises and promotions for meeting quality metrics. Product owners don't listen to people who produce exceptionally quality products (they listen to people who say 'yes' to unrealistic plans a lot, regardless of quality).

Why don't people want to spend the money? Sometimes they literally can't afford it. The suits are still iterating on their business plans and haven't factored in the true cost of developing the product they will ship (which, as all software professionals know, is different than the product they think they're making).

Sometimes people can but don't afford the work necessary to product a quality product. Way too often I see developers give a reasonable estimate that gets stripped down because a deadline (usually arbitrary) budget or deadline has already been set. Likewise, I see estimates get pared down because they seem too big. I also see (probably unintentional) budget shopping, where managers ask for estimates from a few places and then (surprise!) think the smallest estimate is probably the accurate one.

So we can go on and on about tools versus discipline, but it all boils down to incentives and selection bias. We need to figure out how to communicate quality to stakeholders. Or, if that's to technically difficult, we at least need to figure out how to impart reputation to people who can provide subjective (but better) evaluations of quality for experts to rely on.
Honestly I dispute that it is "human readable". It is sort of legible but incredibly inconvenient to read or manually write. They might be slightly more convenient than tabular files such as ACH or DDF
PyDev of the Week: Giampaolo Rodola’
Do the downsides still outweigh the benefits when you consider having multiple clients, especially when they might include mobile apps? If something changes about how I'm doing file uploading (eg. moving to a different file hosting provider), I really don't want to have to deal with the implications of making that change in multiple places, especially when it comes to a mobile app where you can't control what version people are running.
Constants, Constraints and Conditions [Game Rules] (2011)
App stores.
Optional types are a good example of how types make a system safer. Sure, they are a pretty low-level guarantee, but that still counts—and if you have an expressive type system, you can make much higher-level guarantees with types.
You can buy a portable display by Asus or Acer . Or you can use an iPad / iPhone on a Mac.
So on the eve of the seventh day, god swept half the matter under a rug and then went out to play.

I guess we really are created in his image...
It's true that an entity like NSA would notice transactions at their point of origin, before aggregation, and could relate inputs to outputs.

Reducing this linkability doesn't require a trusted party though, as MimbleWimble is compatible with the valueshuffle [0] protocol.

[0] https://people.mmci.uni-saarland.de/~truffing/papers/valuesh...
How to Keep Your Development Environment Clean
Some friends using apple complain about the data usage and they don't understand where the data consumption is coming from, even with the data tracking apps. Don't know what's going on with the latest versions of iOS.
With haskell, for example, that comes at the expense of development velocity and performance (or at least, the ability to reason about performance).

That seems a little unfair. The biggest challenge with reasoning about performance in Haskell is usually its non-strict semantics. That issue is only incidentally related to Haskell's type system being significantly more capable than those of many other programming languages.
I don't think you can buy a new phone running SailfishOS or Tizen right now.
Yeah, I had to live through that as well when I was at university. Fingerless gloves were essential. Below 15 C, it actually gets hard to type.
Some of cliqz services are already whitelisted in Firefox
Ok, it seems like a lot of people here think dark matter is a “thing” but it’s not. Dark matter is simply unaccounted for mass in the universe. When we discover mass that we didn’t know about before, the amount of “dark” matter decreases. The word “dark” here merely means “known unknown” because we observe the effect but not the cause. This discovery has unveiled some of the dark matter as baryon particles in a plasma. So some of that dark matter is now known.
CWork: Cheap microjob platform for web scraping
We have a very skilled group of people based in Bangladesh, who will do data scraping for you. We have developed a mobile app, where thousands of users can join and do one of your tasks. We have currently 500+ micro worker, who are ready to do the job. You can find more information on our website www.cworkmicrojob.com

Moreover, we provide have designed 3 steps data quality assurance system, where team leader of the workers views their submissions in the app, then if the leader approves, it comes to cWork microjob platform. Our in-house quality assurance team again checks the data. If the data quality is approved, then we send the data to the clients.

Additionally, you can log into your dashboard and view live working progress. You can see how many people are working, how many have submitted and how many is waiting in the que. After you get the data, you can finally accept or reject from your dashboard. If rejected the work goes back to the job pool.
That sounds more like a tooling problem.

Actually, I started to put SQL directly into my source code. IntelliJ, for instance, has really good support for embedded SQL code (syntax highlighting, auto-completion, executing queries including placeholders etc.).
`const theMan = 'T La Rock';`

Here's the B side edit of 1984's "It's Yours", one of T La Rock's most acclaimed songs. (by T La Rock, Jazzy Jay, Rick Rubin)

https://www.youtube.com/watch?v=g42-LRWvcbY

#someMusicalRhythmsCanMessWithUrHead
You need the whole social structure that goes with it, not just the prison system.

It includes the social security net, health care system, education, low corruption etc.

The corruption part is actually quite important. Even if you do not call lobbyism corruption it has the same effect and people can see that decisions are not made "for the people", but for the money. This drastically lowers institutional trust and will affect all of society.
if u want to know what iranian nuclear scientists do for a living.. they don't make bombs :P
https://www.thenewenergyindustry.com/project/the-story-of-me...

But maybe now it make sense why they want to thwart their research efforts and destroy their 'reactors' ? ;P
The Impressive Growth of R
Married to someone with anxiety (2016)
Strata NYC 2017 – Data Engineering Trends
Do you have a link to that? This is too funny to pass up.
Division by zero is not a type problem, though it could be solved by creating a 'integer but not zero' type

I'm sure if you spent the day creating types your software would be very reliable. It would also probably not do much

"Relying on the power of type checking" is just wishful thinking that breaks down in the face of any moderately complex problem

The problem of course is not the type system, the problem is people creating types that contain one int/string only when a boolean would suffice, or 10 types of almost similar containers because for some people "ifs are forbidden"

Also reality likes to mess with well-oredered hierarchies
This should have been asked when you're first booting up. I'll receive my one plus in a few days and track whats going on. Transparency is always the best path and supports that you've the best intentions.
I think your perception is incorrect. It is now well recognised that London has the highest quality teaching in the country:
https://www.theguardian.com/education/2012/jan/20/top-local-...

https://www.theguardian.com/commentisfree/2012/aug/07/london...

https://www.teachers.org.uk/expert-view/why-attainment-highe...
I'm not convinced that nowadays the launch of a nuke by a rogue party will lead to a chain reaction.
>TL;DR: we collect the shit out of you and share it with third parties as we see fit. If you disagree you will get a crippled experience

Very well summed up.
Well if one can't get a job programming Idris, Coq or Haskell and they're not used in OSS infrastructure software either, what's the point of learning them?

Then they literally have zero direct effect on improving the safety of anything. One would be better off learning TLA+ and coding in C, or using Frama-C or Misra etc.
If you're running Windows 10, even "top of the line desktop PCs" engage in data collection these days - I have to turn off pages of settings and set group policies to disable it all properly and even then there are still some things which can't be disabled, like the Bing hit every time you type in the search box even with internet search disabled, so I have to use hosts file blocking.

https://arstechnica.com/information-technology/2015/08/even-...

Android is pretty much as close as you're getting - I'd say it's quite comparable to the situation on desktop PCs today if not a little better because the open source community around it is quite potent. In fact, OnePlus is quite popular in these communities for making cheap, well-spec'd phones with unlocked bootloaders where you're free to have full control over your device.

And all this is missing one of the biggest sources of this spying - apps. Most apps send pretty much everything they can get their hands on when you start them, I launched a game the other day and had it connecting to 6 services for 2 analytics, ads, and crash reporting, all of which were contacted every time the app was started. For this I'm very grateful for tools like XPrivacy and LineageOS's privacy guard which all you to trivially block this and such tools are not commonly available on other platforms.
My home setup has a screen directly in front and one to the side, as if I have them both offset then I am always at lesst a little bit strained and I end up using the inner parts of the monitors anyway.

I have considered one below and one directly in front as well so it's up movement instead but I have yet to come up with a good mounting solution!
"Best" is relatively subjective here, I think. Some people may agree that your approach is "best", but plenty of people would also prefer to keep as much of their logic in one place as possible.
A couple 100,000 dead people are a lasting effect.
As stupid as [my reply] may sound, thanks. Your comment prompted me to read that, and you were right, it was a great read.
Contextually my point is that what family is should be weighted correctly by all parties before taking the risk. Good practice and almost never. Like anything, if you've got a handle on your fit, then you can run with it. But family/friends are more often an albatross than not when trying to do something radical.

I can't think of a more terrifying loan shark than a mother-in-law. I also can't fathom risking my marriage over a loan for an idea. The only reason you bring it up is because it worked. There's not a book on failed mother-in-law loans, but if there was it would be a sad fucking book.
Russia confronted CIA about FBI examination of Kaspersky products in 2015
I read the Vox piece, and I don't find it logical. Do you think a fair summary is "nature has a larger impact on IQ than nurture?"

Note the article does concede that genetics impact IQ.

Somewhat related: I find it amusing when parents talk at length about how similar their children are to themselves and to past relatives -- and then pivot to essentially argue that every individual has equal capabilities.
"Standardized testing isn't a particularly good way to gauge schools' ability"

Maybe not the best, but it's still a measure, however crude, and that it's going down is a legitimate cause for concern.

It's not magic - basic reading and math comprehension, are probably fairly strongly correlated with all sorts of life outcomes, though as you point out maybe not as direct as we would like to think - it still matters.

As messed up and politicized as the teaching industry may be - at the core level, again, it's not rocket science: decent teachers, students who are somewhat motivated and want to learn, a classroom with a blackboard and some books etc. etc..
I'm not sure you're familiar enough with what a sufficiently powerful type system can accomplish. A full dependent type system is sufficient to statically prove that code meets a given specification. We're not just talking about ints and strings and optionals when we talk about type systems for correct software. See Curry-Howard correspondence.
> I'm not aware of any post-quantum equivalent to Pedersen commitments

I just learned from Andrew Poelstra of just such a construction [0], which even supports migration from
Pedersen commitments.

[0] https://eprint.iacr.org/2015/628
OK.. now what should I say about my Xiaomi "smart"phone?
PWA's weren't ready 2 years ago when FirefoxOS was being pushed, they're probably still not ready but there is major progress. It's mostly about scale and ecosystem now, development of well designed touch-friendly web components, iOS implementing Service Workers as is currently underway, and so on. That's not to say they can or will replace native apps, but there will be a growing overlap.
More convenient than JSON, more consistent than YAML.
Periodic driver breaking.

Locked or hardtoflash bootloaders.

Not releasing code. Even encrypting stock ROMs.

Punishing power users by blocking root.

Consumers not caring.
This is a most excellent book about Reconstruction from firsthand accounts. This country would have been a far different place if the federal government had seen its responsibility through.

https://www.goodreads.com/book/show/1886754.The_Trouble_They...
> With haskell, for example, that comes at the expense of development velocity and performance (or at least, the ability to reason about performance).

The (depending on perspective) weaker ability to reason about performance in Haskell stems from laziness, which itself has nothing to do with type systems. It's clashes with side-effects are solved _via_ the type system (The IO type).

Regarding development velocity: _The developers_ are choosing how much time they spent on proving things to the type checker.

Sure, writing a function that requires of its argument the type { n % 2 == 0 } or something is more labor intensive than just using Int and runtime panicking on invalid values.
But you can choose do just that instead!

There is no decree that on has to be as precise in their types as possible, no matter how much a given type system is able to express.
"Rather, I think the account matching described in the affidavit says the FBI could have identified which VPNs Lin used via orders to Google, Facebook, and other tech companies, and using that, obtained a pen register on PureVPN collecting prospective traffic. I don’t think what is shown proves that FBI obtained historic logs (though it doesn’t disprove it either)."

Source: https://www.emptywheel.net/2017/10/09/purevpn-doesnt-need-to...
Not really, I prefer to code on my 13" MBP. I have 24" monitor but I rarely ever use it. Ability to lay back and put legs on coffee table are more important to me.
Not sure if it's the same one I followed for some time, but maybe it's this one: https://sscaitournament.com/
It is very important to have QA people the engineers respect. What makes a QA person respectable? Strong understanding of the business logic. Clear communication skills. Strong awareness that they cannot build the system, but a strong understanding of how systems operate. They work as hard testing as engineers work building, and deliver their findings efficiently. They can accurately evaluate the magnitude of an issue. The analogy I think of is like an offensive line to a quarterback. The engineers get the headlines, but without a solid QA team that doesn't happen. If QA is doing a good job, make sure everybody knows it.
“Triple, Triple, Double, Double, Double” to a Billion-Dollar Company
> I only ever ssh into production servers on the white on red terminal so there's a strong visual signal

This is a great idea.
No?

ryans-mbp:~ ryan$ curl https://open.oneplus.net -D-
HTTP/1.1 200 OK
...
Server: nginx

Hadoop is the name they gave to the ELB on AWS. It could have just as easily said totallynotspying-1219418324.us-east-1.elb.amazonaws.com.

Granted the data could end up in a Hadoop cluster, but they didn't expose that directly to the internet.
I think they're great! I am pushing to use them in our C++ code base and they empirically do improve safety by transforming UB into a nice exception.

But they won't prevent a programmer from using MD5 for RSA signature verification.
Basic, decent, somewhat cross-discipline education is the cornerstone of civilization.

Yes - it's to some extent daycare, yes, maybe too much focus on 'University for Everyone', yes, maybe too much focus on standardized education ...

But getting everyone reasonably literate and 'through high school' - is probably the #1 thing any nation could do to improve the standard of living in their citizenry.
Cliqz is one of the things you can add to your browser through testpilot, so it's not surprising cliqz is mentioned in that context. It also seems to be a "legacy" extension, thus maybe needing the exceptions.

https://testpilot.firefox.com/experiments/cliqz

Seems to be more likely than "Mozilla is secretly giving data to Cliqz and hopes nobody notices" to me. Unless someone has actual evidence to the contrary?