skysight-inc/HackerNews huggingface dataset:
Please note that the quote is mis-attributed to Linus Torvalds, but it's actually from ESR.

Reality has proven him quite wrong.

http://heartbleed.com/

Not only is ESR wrong, but also his mis-attributed slogan overpromises a false sense of security, which is dangerous.

In response, he tried to construct a straw man argument that "proprietary software is worse than open source software", which does not in any way support his claim about "all bugs being shallow".

http://esr.ibiblio.org/?p=5665

Anyone who thinks all bugs are shallow under any circumstances just hasn't seen many interesting real world bugs with their own eyes. Their experience is limited and their confidence in their software, security and mastery of programming and debugging is pure Dunning-Kruger effect. I'm with Ken on this one.
> I don't get why automated testing is a "domain specific type system checker".

That's because he was talking about formal verification. Testing like the name is normally used is a "adhock domain specific heuristic type system checker".
> China is an economic superpower. Russia is an economic backwater with nukes.*

*: figures measured in russia-ostracizing western funny money
> If you need protection against fault attacks in your threat model, you are way past the point where library safeguards will help you. This is probably the point at which you can't responsibly ship products without getting an actual crypto consultancy to sign off on it.

I wish there was a way to make comment text bold, because this definitely seems like it needs to be emphasized.
Tangentially, we as the consumers often lament that some keys in the devices we own remain hidden from us. In such cases we posses the devices and we are the "adversaries" from the point of view of the companies that produced them.

The article shows that maybe it's still somewhat easier to get them than we'd often assume?
I think his main point is that we don't see MBAs supervising the construction of a bridge, why do we let them supervise the creation of software? A civil engineer has sufficient organizational clout to push back on unrealistic deadlines when managing a project, but software engineers don't have this level of recognition. The way to be recognized as professionnals, according to him, is to start acting like one.
First look at WhatsApp Business
Woozle effect
In my comment it would be the government fixing the price, so I imagine they would write the law (the one providing 100% coverage of vaccines) to either comply with the Sherman Act or to be excepted from it.

The idea that the government would provide 100% coverage of vaccines without fixing prices is one that people are free to argue, meanwhile I will gesticulate wildly in the direction of Medicaid.
Thousands of years in the case of China.
There isn't a good alternative. I prefer to pay for Acorn flyingmeat.com/acorn and pay $30 only once, rather than pay an eternal $10/mo to Adobe.
AIM retiring in Dec 2017
Lulzy rule of law in a kleptomancy ruled by a de facto dictator and his henchmen takes its toll on people.
Optimize JavaScript code for composability with Ramda.js
It's a complicated predicament. Who's the primary earner? Have you tried proposing something like, let's try it for a few months and if it doesn't work out we can move back? That way the move doesn't feel so permanent and will give her time to enjoy the Bay Area.

It sounds like you're young, treat the relocation as a temporary thing. If it's a company that's going to make your resume then I look at it as a one to two year commitment and then you can do whatever you want. I would say try and also spin the travel, explore new areas, be adventurous kind of lifestyle, home will always be there, and since you don't yet have kids I would travel explore and enjoy the heck out of whatever time you've got left.
Here in Munich, Germany I get most of my amazon packages via amazon logistics, and have for at least a year. They are great here, they usually find a way to leave the package, I haven't had to go pick it up yet.
Your nitpicking is totally unfounded. Oligopoly refers to the state of the market, not the intent of actors within the market. If there's only a few, large firms it's an oligopoly regardless of the reason.
SMTP authentication may be buggy. I can't connect to an AppRiver account via IMAP and SMTP, but am able to connect to a more traditional Linux-based IMAP/SMTP setup.
It is not reasonable of you to ask unless you've made a reasonable effort to look for their software and failed.

Robert Martin's best known open source software contributions are for FitNesse, which is reasonably well known in the testing world. https://en.wikipedia.org/wiki/FitNesse

Tell me, have you read the Space Shuttle control software? There are dozens of not hundreds of papers about NASA's development process. Are you saying that since you can't look at it, you're not prepared to take their word that the software is successful?

Because it seems to me that there are other ways to judge success than simply reviewing the code.
Emacs for everything. If I start a using a new language I'll hand craft snippets, wire up with any linters or external completion engines and other tools.

If there is no good completion solution, then I'll cheat. Grep to the definition (or jump with tags), open it in a buffer and I can look at what is there. At that point the members are now available for "dumb" textual completion. I'll create helper function to do this.

Give me a few hours and I can match just about any IDE feature. The mechanical parts of the workflow are crazy fast and fluid.
My uneducated guess would be because of the long-term effects of nuclear weapons compared to traditional weapons.
The term honest comes from the ingredients in the diapers being non toxic. It’s possible that the rest of their products are as well. It comes from an experience Jessica Alba had when one of her kids ate part of her diaper when she left her unattended for a moment.
> The i386 and amd64 platforms have switched to using clang(1) as the base system compiler.

Nice!
I'm not a Keybase developer, but I'm a user of Keybase Git, git-remote-gcrypt and git-gpg, and I've just written a comparison of the 3. Here you are:

http://ptspts.blogspot.com/2017/10/comparison-of-encrypted-g...

If I missed some of the aspects, please let me know.
Running SNES Classic Mini on Raspberry Pi
Linked elswhere in this discussion:

https://github.com/pirate/bookmark-archiver python script

https://chrome.google.com/webstore/detail/singlefile/mpiodij... save as a single html file

> uses "data URI" scheme to embed image and frame contents into the page : the resulting format is not MHT/MHTML
You only need 2 processors, since each cores gives you 2 vCPUs. "For the n1 series of machine types, a virtual CPU is implemented as a single hardware hyper-thread" --https://cloud.google.com/compute/docs/machine-types
Yet Another Russian Hack of the NSA – This Time with Kaspersky's Help
Here in germany amazon delivers many of it's packages with their own service, and has for more than a year now.
Interesting game, thanks for sharing.
EIEIO
Ruby on Rails Engineer at Teamer in London, UK
See my comparison of Keybase Git, git-remote-gcrypt and git-gpg here: http://ptspts.blogspot.com/2017/10/comparison-of-encrypted-g...
My problem with Uncle Bob's opinions is that they are pretty common within the industry, even if "discipline" really isn't the issue and all those negative feelings people allude to are warranted. In general, people are made to feel guilty for not being able to use the shitty tools and techniques we are given.

Lets take for example ORMs and Hibernate in particular. I can't tell you how many times I've seen horrors related to ORMs / Hibernate, because of an actual mismatch between relational data and object graphs, but then developers are made to feel guilty because they "aren't using it right", made to think that only if they switch this setting on, use this and that annotation, read a book or two, everything will be alright going forward.

Most such projects fail from a technical perspective of course, because the developers having invested so much time in those shitty techniques, exploration of alternatives becomes unfathomable to them, because all of that effort which can span years ends up being unjustified. And I suspect that Uncle Bob is guilty as well.

Lets take TDD as another example. I remember a time when TDD was religious dogma, which was unbelievable, because I couldn't see actual TDD in projects of companies advertising TDD in job descriptions. Much like Agile, Scrum and all that crap, it usually doesn't work because, as the masters will quickly tell you, you're "not doing it right". I've seen a single project where TDD was implemented by the book, but the developers where wasting so much time on testing stuff, including endless discussions, that they were forgetting TDD wasn't the actual artifact they had to deliver.

Now Uncle Bob tells me that we don't have the discipline required. That's not surprising. I’ve been hearing this argument in some form or another for years.

The surprise is the attention that we are paying to what Uncle Bob has to say.
Master Chief is hidden inside the Xbox One X riding a scorpion – The Verge
Senior Ruby on Rails Developer at Drover in London, UK
It's Clear from that that it's been a while since Bob Martin worked in the real world with real bosses, budgets and deadlines.

The problem is that the business tend to drive the "if it compiles, ship it culture" but also want to blame some lowly replaceable coder for any mistake so the organization and it's leaders can avoid any responsibility for any damage done due to their decisions to ship first and test later.

And Bob Martins post seams to cater perfectly for that sentiment, of never blaming the CIO/CXO for demanding the impossible, and overruling concerns but laying the blame entirely on the lowest and least powerful link in the chain.

People tend to forget that shipping despite warnings from a formal test suite, is baiting an audit failure in a way that overruling concerns voiced by actual people.
You can find solitary people in a big city, too. But if you have a respect for nature, it would make sense to get out into the outdoors.

The really sad thing is it's difficult to be alone in the wilderness. You have to cross check maps with flight paths so when you're in the middle of some remote mountain range you don't have to listen to the drone of planes flying overhead dozens of times a day, or the passage of cars on a highway reverberating off canyon walls, or the buzz of electric wires crisscrossing the countryside.
I wanted to echo this. Fowler should not be lumped in with the other guys for his Refactoring book alone. Not only is it a really good guide that helps programmers understand how to rigorously make incremental, non-breaking changes. It almost reads like a specification for a refactoring tool.

Really good software engineers write more than code. They know how to clearly outline ideas than can be handed to other developers.
It's a fantastic talk. One of the best talks on programming that I'm aware of.
Zapad drills – #Russia may have tested #cyberweapons on Latvia
so the bare metal might still have 4, such that it could host 2 of these VMs at once I guess.
No ESC key
Kinda kills emacs + ssh
Well that would be a reasonable strategy for analytics queries
I disable JavaScript on all sites and then whitelist the sites I'm willing to accept JavaScript on. The whitelisted sites are sites with whom I have an ongoing relationship. For example, HN which uses JavaScript to expand/collapse comments.

This is nearly 100% effective.

Most sites are usable (usually a lot more usable) with JavaScript disabled. On some sites the layout is not as the site intended, but is still usable (often have remember to scroll down to see the content). A few sites refuse to serve content without JavaScript. Mostly I ignore those sites. Some times I enable JavaScript temporarily to read their content, but I usually have "buyer's remorse" after seeing the (low) quality of their site's content.
Fibonacci Numbers Hidden in the Mandelbrot Set – Numberphile [video]
Yes but that doesn't necessarily mean they'll be able to interpret what they get in response.
Facebook's Fake Numbers: Parsing Facebook's “Reach” Inflation
13 Methods to Forecast, Analyze, and Solve Problems
That's interesting, and it's a good argument for the money to come from the government and not insurance companies. When it's a public health issue, you want make sure everyone is covered.
To some extent, they all are, yeah. If for no other reason than from a designer's perspective of "How many cards should I include? How many components are needed? Do I need to change this based on how many players? How long should the game last? How many turns/rounds/minutes? How to I model this to make sure the game is balanced?" etc. I design both board and video games, and these are questions I have to figure out the answers to for each and every game.
Search the Enron email archive
You are presuming OP to be correct..

But what do you know!

Even China itself seems to think pairing up with Russia for economic development is a good idea..

https://en.wikipedia.org/wiki/BRICS#New_Development_Bank

Gee I wonder why some of these countries are portrayed negatively or suspiciously in the west..

"The CRA is generally seen as a competitor to the International Monetary Fund (IMF) and along with the New Development Bank is viewed as an example of increasing South-South cooperation."
I've used FreeBSD on my laptop (lenovo x201) for a long time, I've also installed OpenBSD from time to time. The rumors on the internet was that OpenBSD had better hardware support. I remember someone claiming that whereas FreeBSD developers use VMs to develop, OpenBSD devs used native machines (mostly laptops). I faintly remember that installing OpenBSD was harder than FreeBSD. FreeBSD came with a terminal graphical installer, partioning etc. happened automatically.

The problem I had with BSDs was that they were slower than Linux. Especially when it came to boot times, Linux booted up in seconds due to parallel starting of system services. On FreeBSD the same machine with an SSD took nearly half a minute to boot. Some people here on HN had advised me to use a parallel system initializer, or never completely shutdown my laptop. Always keeping the laptop at sleep did not work for me, because I was (and am) very paranoid when it comes to computers, I can't sleep if my computer is not shutdown and has an ethernet cable plugged into it. Using a parallel system initializer did not work, because I was too lazy to set one up.

Battery consumption was another issue. Although FreeBSD provided decent battery life, utilities like powertop did not exist for BSD platforms.

What I liked about FreeBSD was that it was a pure OS. When I opened htop, I could see only a handful of processes running, and I knew what each process did.

On the other hand, everything required manual configuration. I basically lived in the terminal to operate my laptop. But that is probably due to my lazyness to automate and write scripts.

I'd also be interested in the differences in day-to-day life between FreeBSD and OpenBSD.
I assume you've seen "Object-Relational Mapping is the Vietnam of Computer Science"?

http://blogs.tedneward.com/post/the-vietnam-of-computer-scie...
Actually "your web browser, mail client etc" do a lot of system calls to do networking et al, so yes, they do have less vulnerabilities than on Linux.
Legally, the government cannot give out vaccines with no questions asked, no ID. Every asset the government distributes must be accountable. We must keep a immunization record (usually in the patient's possession) of who and when, along with records on the health care provider's end for compliance.

Say someone experiences an adverse reaction to a vaccine (which does happen) and wants to sue the hospital; no questions asked means that the medical provider did not do a proper assessment of the patient, leaving that professional legally liable to damages.
But don't do that when you plan to use Vim to write in Dutch. I've also tried 'jk' for a while and it worked great until I started writing some texts in my native language: 'ijk' appears to be a pretty common ending for a lot of Dutch words :)

These days I've mapped CAPSLOCk to ESC and super happy with it.
Who needs to go to China for this? This is on par with the very high end of engineering salaries at Facebook.

What's extraordinary here IMO is that this company is being open about it rather than behaving like such compensation is on some secret menu you can only order from HR with a counter offer in hand.
This is unfortunately a very defensive article. The author would do better if he chilled out a bit.

I get why he's defensive: Martin calls his baby out in his article. And, although I think that Martin himself comes across as defensive (he is alarmed that the journalists didn't interview 'real' experts like himself), I also don't think he is wrong. In fact, as a practitioner for over 20 years, I've witnessed first-hand the gradual degradation of software discipline. I've seen too many companies do exactly as Martin describes, and it causes many issues: from critical bugs to developer burnout.

It's important to look at the root causes. I surely don't have all of the answers, but I do note the rise of the 'startup culture' as a major issue. Even at big organizations, employees are now expected to run projects using extremely low resources. The companies encourage this behavior saying things like, 'think of your program as a startup'. Startup is the new executive buzz word.

Startups are obviously great, but they take on extreme amounts of risk. And, since people only see the survivors, they naturally make the (erroneous) logical conclusion that startups are silver bullets and have guaranteed return on investment. Therefore, every project should be a startup! And, with that, we see skeleton teams with huge responsibilities and expected return but a deficit in resources. Today, an engineering team of 4 people is expected to do the work of 16 people circa 1995. Team leaders accept this pain and manage it by sweeping issues under the rug. As a side note, it tends to cause people to be more unethical.

The examples that the author uses (Amazon, Microsoft) are not representative of typical software organizations today. Amazon and Microsoft have huge amounts of resources available. They have veterans and researchers able to take things like TLA and apply them to real projects. They have the ability to manage their risk. But, a typical team is strapped for time and they must rely on tools to save them at the expense of software discipline.

Anyway, my point is that investors want huge return on investment. This causes sales and marketing teams to over-promise and under-price. This causes delivery teams have to drive their projects with extreme risk. Extra people are too expensive, so just wing it. If you survive, maybe you’ll get to build it right the second time. If you fail, well rinse and repeat at the next place.
Yet, if you then proceed to send your signed document over a network, for it to be rejected 10 minutes later because of a bad signature and then you have to start from the beginning again, that verification cost is irrelevant.
Hazelcast 3.8.3
Happy 25th Birthday ThinkPad
Maybe this is too obvious (I assume you've already rejected it as an option), but depending on how desperate/minimum-viable-product you are: Google Drive, Dropbox, etc. offer PDF preview functionality.
I can verify that the issue I saw has been fixed. Now that's the kind of turn around time that I like to see!
Three quotes are from the book "Coders at Work". I can really recommend that one, very interesting read. My review of it: https://www.amazon.com/gp/review/R2OV0TG7MJGXGL
You friggin' got that right. And don't tell me it saves power. FORK TIME
If you are "self fulfilled Prime" i.e. your own warehouse...you must use Amazon negotiated rates and print Amazon labels. We do this. I would expect them to open their shipping service to us for this. It will put mail consolidators like Newgistics out of business. Newgistics picks up from us, sorts, then delivers to the nearest end point (Bulk Mail Processing Center), where USPS takes possession of the mail and delivers it "last mile".
For one reason, if you only need the one system, you almost certainly need to compare the cost to owning and maintaining two.

If you can't tolerate the server being down for more than the lead time it takes to get a new one, you need to already have one on standby. The lead time is probably at least a couple weeks, but there's no guarantees since you're depending on vendor availability and hundreds of other things out of your control.

Depending on what you're running on it, you'll also probably want to test software upgrades and have fallback plans when you deploy.

The thing the "cloud" version gets you is zero lead time, along with the ability to spin up a second instance (or ten, if you want) while you deploy a new version or just want to do some testing.
If I was a bank opposed to this plan here is how I would kill it. I'd say (well, I'd pay people with bullhorns and signs to say) the new requirements for 'wrongly reported debt' require banks to have greater ID requirements, greater ID requirements have been linked to less minority representation thus that plan is a racist plot.

It would be dead in the water before you could draft the bill.
Nuclear/biological/chemical weapons have the distinct ability to have lasting effects on the area/population they are used on. "Conventional" weapons have their immediate effect (death, destruction) and then that's it.

The fact that some of us are able to at least try to limit their use is great considering humanity's track record...

Of course this is all generally speaking, as each class of weapons have effects that last shorter or longer than others within even the same class. e.g. nuclear air-burst has less fallout than a ground-burst. Some chemical weapons break down fairly quickly and become inert, while others linger, etc.

Then you have to consider cluster munitions and land mines, which while apparently conventional, are quite indiscriminate and also can linger for decades. These devices have also been more successfully restricted than other conventional weapons.
Asynchronous code with async/await
Is it really worth switching editors between languages?

I do think they it could make things harder/easier. For example if I want to switch from C# (in Visual Studio) to any other editor - it feels like a less familiar experience (and will be less productive at first)

This not only effects writing code, but debugging methods as well.
53.3Tbit/s optical switching record
No tool will ever successfully enforce discipline. If anything, it makes people more lax.

But the end goal is not disciplined programmers! It is better, safer and more timely software.

Your argument applies just as well to safety equipment in cars and on heavy equipment, and you may be right that the reduced risk of being killed or maimed makes people more lax. But you can’t argue with the results: Far fewer people do in fact get killed or maimed!
That's not the point.
Of course that the software will have the same number of bugs/vulnerabilities on OpenBSD.
The question is how much damage an exploit/crash will do overall. OpenBSD has quite a few of protection mechanisms in place.
Not this guy.
> if people don't realize that and try to create some sort of standard than eventually someone with no knowledge of the field will.

I don't think so... No one's hunting down and calling to account the engineers responsible for the Equifax breach, and nor should they. The problem is blatantly a leadership and resource-allocation issue, and is being treated as such.
Are there "conventional" weapons capable of leveling cities/regions, buildings and all ?
A Fast, Secure Migration to Google Cloud Platform Using Cloudflare
Those batteries were actually also Eneloops (probably)

https://www.engadget.com/2010/08/12/apples-rechargeable-aa-b...