skysight-inc/HackerNews huggingface dataset:
> Lisp let’s you build the language you want to use, and have it interoperate for the rest of the ecosystem.

I suspect this strength of Lisp could have undermined improvement of Lisp compilers in long term. That is, the fact that programmers can customize the language to run efficiently for their applications put less pressure to make the existing compiler better, compared to the languages that don't give programmers such flexibility.

I've worked on performance-sensitive commercial Common Lisp applications. We employed heavy macrology so that optimal instructions were generated in the performance critical regions. Effectively, it was reimplementing part of the compiler to deal with out domain-specific meta information such as parameterized types. It worked, but came with the cost of maintenance--as if we were maintaining another layer of the compiler. It was a burden. I'm sure there have been such effort spent in many other places and eventually abandoned.

Meanwhile, languages that give less power to the programmers, put lots of efforts to improving the compiler and/or the language that work more effectively with the improved compiler, and over a few decades, they have quite sophisticated compilers.

I still mostly use Lisp-family languages at work, but sometimes wonder if the power could have adverse effect in long term.
Nice one. But how do you look at Twitter only once in a couple of days? Twitter is useless this way if you ask me.
>> selecting everything without paginating but fetching just one row at a time in the application

This is called an "unbuffered query". The problem usually isn't with the number of rows you're trying to read; it's about what the database must do on its end before it can know which rows to send first. ORDER BY being one example wherein, unless you have perfect indexes including the sorted column(s), the database has to generate the entire resultset before even sending the first row. That means writing potentially millions of rows' worth of information to memory or - more commonly at large sizes - to a temporary table on disk.

Unbuffered queries are fairly rare in the "real world". While in theory it means you're parsing results faster and using less memory on the application side, it introduces difficulties like the fact you can't run a subsequent query until you've finished reading all rows from the original query.

When an application is reading this many rows with a single query, it's usually an indication that the app is poorly written. Of course there are exceptions, though typically reserved for maintenance scripts, reporting, data migrations, etc.
Apple co-founder Steve Wozniak launches his own online tech education platform
Not a quality comment.
Because it's been in this mode for 14 years already.
"The C5 was a Lockheed project."

Yes, I didn't say something different,

"[...] CX–HLS program - which resulted in the C5 - [...]"

"In fact, the 747 would be an entirely original design that owes nothing to the C-5."

I sadly have not time to dig deeper, but this looks suspicious, b/c the planes look highly similar and both were planned as freighters by the same company at the same time. And although he is a primary source, if you ask me about some of my projects from 20y ago, I'm hard pressed to recall all details. Also considering the legal lawsuits between Boeing and Airbus in any case this is a wise thing to say.

But perhaps if I have more time next holidays. Thanks for the link.
> This can be abused to steal sensitive information such as credit card numbers, passwords, chat messages, emails, photos, and so on.

... if transmitted over plaintext http
Is there a way I can install an open source phone OS on my old Android phones to keep them patched? I'm not prepared to keep buying new phones just because manufacturers only provide intermittent updates for a year or two.

Anyone got any suggestions for options?
Top upcoming ICO 15th – 21st October
Corda V1.0 Released
Or if combined with some other vulnerabilities...
Please change the title. yet-another-random-dude-closes-his-fb-account. He did not close his medium account though, so he can blog about his amazing journey clicking few buttons on a webform.
Don't you only need to patch one end of the communication? Eg if phones are patched, they're safe, even if the AP is not. Then again, I didn't read the attack fully, this might be a client-only problem.
Its funny. Most people I know (~37 and under) only really use it for events and, at times, messenger. Its sort of a modern phonebook.

My sister (early 40s) and her peers are still using it on a regular basis, but the content could easily be on twitter or instagram.

The real demographic that is in love with it is my parents' generation, ~67+. They follow a lot of the '%city% then and now' and other nostalgic groups. Along with those, their feeds are filled with goofy videos that were going around a while ago.

I don't see Facebook going the way of myspace in the near future, but I do think they'll have to shift their focus a little if they want to draw us back in.

What I don't understand is why facebook isn't going head first into online dating. They already have a lot of information on everybody -- where a lot of us like to eat, locations we frequent, events we like, etc. For a lot of us the data would be slightly outdated, but I bet they could give some solid suggestions.
It seems that OpenBSD already patched their source code and that wasn't to the likings of the researcher. In the future he will now delay notifying OpenBSD of vulnerabilities.

Why did OpenBSD silently release a patch before the embargo?

OpenBSD was notified of the vulnerability on 15 July 2017, before CERT/CC was involved in the coordination. Quite quickly, Theo de Raadt replied and critiqued the tentative disclosure deadline: "In the open source world, if a person writes a diff and has to sit on it for a month, that is very discouraging". Note that I wrote and included a suggested diff for OpenBSD already, and that at the time the tentative disclosure deadline was around the end of August. As a compromise, I allowed them to silently patch the vulnerability. In hindsight this was a bad decision, since others might rediscover the vulnerability by inspecting their silent patch. To avoid this problem in the future, OpenBSD will now receive vulnerability notifications closer to the end of an embargo.
Situs Poker Uang Asli Di Indonesia – Agen Poker Terbaik – Asiapoker303
I use Twilight on a regular android. Works fine for what I want, not sure if it has all the features that f.lux has: I just use it to have my screen red-er.
Well I really like the “in case you missed it” section. Brings up the important and funny stuff condensed.

If I hear something’s going on, I’ll open un the TT section and get some instant insights from it. They way I see it, Twitter is useless most of the time, it comes in handy only when some event is taking place.
You have to prune your network until there is enough time to read everything.
How to repair an IC with damaged pins
Which is literally the opposite of the clickbait bullshit headline. They've issued an update which fixes phones that were repaired with third-party screens.
> I agree with the author on the part of currency needing to be stable, and cryptocurrencies in their current state are not stable. […] It takes time, effort, and entropy to gain the momentum needed to be stable, crypto is still in its early-adoption-phase.

The problem is : if you want a stable currency you need a money supply that grow as much as `inflation + growth + the slowdown of the money flow`, if you don't have that your economy collapses. All of this is changing over time, then you need to adjust the supply of money dynamically. And unless someone finds a way to do this automatically, you'll need a pilot in charge of this. This is currently the job of the director of the central bank, it can also be the president of the country, the parliament, or anyone but you need someone (or some cleverly designed distributed mechanism that doesn't exist yet). If you don't address this, cryptocurrencies aren't better than gold money, which historically proved inefficient in an industrialized society.
It's sad that the standard python multiprocessing doesn't allow you to select your own serializers.
Why would Amazon have to do anything about it? Taking care of its citizens is the government's responsibility.
How long does it take to rank in Google?
So that's a 'no' on both counts, then?
Rick seems to have a typical behavior reflecting a “fixed mindset”. This concept is described on the famous book from the psychologist Carol Dweck. He seemed to search for validation all that time. Since the failure would be an atemporal sign that he was not good, he denied the errors. Thankfully, according to the research, eveybody can change from a fixed mindset to a growth mindset. We all have some quantum of Rick inside us. I am reading this on a Monday. This is a good text to start the week and reflect about my behavior at my workplace.
Technically it is, but it is much more than that in reality. All my friends use Facebook to create parties and announce sudden gatherings. I don't use facebook to much more than to know when these things occur so I can participate but if I were to deactivate my account it would mean that I would probably miss out on some of these gatherings.

I'd rather just keep my account and post as little as possible in order to just recieve that information. Even if I personally do not like facebook, pretty much everyone else does. What can you do?
Nice summary. The author has correctly observed that so much of the finance industry is really about clearing and settlement, and that what circulates are claims on money.

This is present in the crypto world too. When you wire money to an exchange and use it to buy cryptocurrency, it doesn't immediately turn into a crypto transaction - you get a claim on that cryptocurrency. Sometimes exchanges are unable to meet those claims or issue claim-like tokens ("Tether").

Also correctly notes that "inflation" worries are more to do with how your future asset and liability flows match up, which have very little to do with supply of the currency itself (apart from extreme Zimbabwe moments). Hard Money == Price instability.
Might be the production _rate_ for the previous models doesn't mesh well with their suppliers. We buy plastics in runs of 15,000 parts. It takes us a couple of months to go through those. And then we order more. The manufacturer doesn't make 200 parts a day. Or 1000 a week. The do a full run of 5-20,000 every three months. Which takes them a whole day, once the machine is setup they run it till the order is filled. Sometimes it's obvious they do higher runs and then break up the shipments.

Okay so our products are cheap and simple. But our yearly totals of 50,000 to 100,000 units is comparable to the what Tesla is hoping to get out the door. Tesla's numbers for previous models weren't nearly that high. Gonna be hard to just in time that.

Personal feeling. What an automaker is doing by outsourcing parts to suppliers and then making them manage inventory is. a) they as someone mentioned, keep the inventory management away from the production line. And importantly allowing suppliers to apply higher levels of scale then you could other wise. Important because likely many of Tesla's suppliers production machinery has vastly more capacity then Tesla needs. Telsa and other automakers are thus 'renting' time on those machines.

Frankly I think Tesla is ramping to this scale for the first time, it's bound to be a mess.
Maybe it's simply the fact that the C++ code was object-oriented?

OO allows you to make a much worse mess than procedural programming in my experience.
Next time you drive, come to a complete stop and feel the car as it rocks back on its suspension. This will happen even if you brake quite lightly. You can slowly raise the brake so that you are barely braking right as you stop, which will almost completely eliminate the feeling, but it makes your stop excruciatingly slow. Theoretically, you could also eliminate the rock back at a stop sign by lifting your foot off the brake right as the car stops (before it moves backwards that little bit). The vast majority of drivers who think they are stopping completely actually lift their foot off right before that moment, so they don't experience the jerk.
"It's just a web site" is such an empty statement. A web site could be anything, from a meeting point to harass others until they kill themselves or a trove of all knowledge in the history of humanity.
> One of the nice things about JS versions of stuff is being able to run it everywhere.

To my knowledge node does not run on SPARC processors (because V8 doesn't).
On page 4/5 this presentation says:
>this might not be true of a sufficiently credible Tether-like stablecoin
whose value is pegged to a fiat currency, but there the crypto is
piggybacking on the effectiveness of the fiat.

I was intrigued by this Tether thing and ended up on the site:
https://tether.to/

It says:

> Every tether is always backed 1-to-1, by traditional currency held in our reserves. So 1 USD₮ is always equivalent to 1 USD.

> Our reserve holdings are published daily and subject to frequent professional audits. All tethers in circulation always match our reserves.

A nitpick I have on the site design is that nowadays sites don't put sitemap in the footer. So I have to difficult time finding the balance page:
https://wallet.tether.to/transparency

Can someone help me make sense of this? I thought the numbers are there for the claimed 1-to-1 USD reserve but that doesn't seem to be the case. The value there is from the assets issued on blockchain and not the USD balance on company's book.

Secondly, I might be wrong but can't seem to find who is conducting the audit. Is it one of the big 4 or some home office? If it is a small time office I will be even more skeptical of this whole thing.
what email provider is that, with perfect spam filtering?
"Fiat money and
associated banking systems are the technology that enables
the finance of war on scales that would have been unimaginable
a few centuries ago"

This quote appears in the summary but isn't really supported by argument within the article, and is quite a big claim!
"Our attack is especially catastrophic against version 2.4 and above of wpa_supplicant, a Wi-Fi client commonly used on Linux. Here, the client will install an all-zero encryption key instead of reinstalling the real key. This vulnerability appears to be caused by a remark in the Wi-Fi standard that suggests to clear the encryption key from memory once it has been installed for the first time."

"Because Android uses wpa_supplicant, Android 6.0 and above also contains this vulnerability. This makes it trivial to intercept and manipulate traffic sent by these Linux and Android devices. Note that currently 41% of Android devices are vulnerable to this exceptionally devastating variant of our attack."
> It's just a Web site

...full of human connections. Which people tend to enjoy.
£19 is probably pretty close to the marginal cost of carrying an extra passenger, and only available on flights they know won't sell out anyway.
> I believe we’ll look back in 10 years and realize that this generation was ridiculously over attached to [human connections]

Fixed that for you.
> I looked for one

Yeah?

http://www.businessinsider.com/fcc-ajit-pai-privacy-rules-is...
Hardening Linux-based IoT systems
LineageOS has a moderately large selection of supported phones for a custom ROM and it has weekly updates. My two and a half year old Moto E has the October 5th security patches for Android.
The government paid Boeing to do certain projects. That isn't a subsidy. Just like when you buy an F-150, you are not subsidizing Ford.

Even if Boeing plows profits from government work into another project, that is not a subsidy. Profits are the property of Boeing, to use as they saw fit. (Boeing was making huge profits off of the 707 at the time.)

https://www.merriam-webster.com/dictionary/subsidy

The government did not provide payments or financial assistance to Boeing to design or build the 747. They did for the SST, but that was for the SST.

Now, if Boeing diverted government money from the SST project to the 747, that would be fraud and a crime, and you'd need some evidence to assert that.
That's not true. At all. Almost all scientific libraries resemble template libraries but with bespoke, exposed name mangling and significant portions of the internal data structures specified in comments.

They do this, not because it's inherently a good thing, but because the advantages of using Fortran or C have outweighed the disadvantages. But where that's not true, for example in end user computing, Fortran has not been popular for decades.

What the Julia devs are attempting to do is to design a language that has the ergonomics of a Matlab or R to make scientific programmers productive whilst having the performance of a Fortran or C. They have a sophisticated type and dispatch system to help bring these goals together.

Now, their current focus appears to be more on the R/Matlab replacement than on becoming the language of choice for HPC, say. So the steady state performance is unlikely to be competitive at scale as yet.

Maybe they won't get there. Maybe the decisions they've made mean that it's effectively impossible to eek out those last few percent so we'll still have a 2 language model. I don't know but I applaud them for trying.

More, I applaud the way they have gone about their development: focus on usage, actively learning from other languages, very little linguistic dogma. I hope they succeed.
A lot of Julia code is not only generic in the element type, but also with respect to the array type: a linear solver written in Julia works on classical matrices, but also on banded real matrices or sparse arrays of BigFloats.
This, of course, all came hot on the heels of the Great Plague of 1665. It was not a good year to be a Londoner.

Though they couldn't have known it, these two events were major catalysts in London's renaissance and evolution into a financial and industrial megacity.

There's something remarkably and utterably English, however, that when disaster struck, the first urge was to blame neither god, nor simple misfortune, but the French.
Not the first time OpenBSD does not respect embargoes, for example https://lwn.net/Articles/726585/ and https://lwn.net/Articles/726580/
And the least expensive Intel Xeon SP Platinum you can buy is ~$3000. No wonder why there's not a head-to-head benchmark on a cost basis, e.g. epochs/min per $.
Tons of phones won't be patched. Android phones generally only get system updates for a small portion of their lifespan.
> I'm not prepared to keep buying new phones just because manufacturers only provide intermittent updates for a year or two.

You could just ... buy an iPhone and get timely security updates for years.

EDIT: Downvote if you want, but if iOS 11 contains this security fix exclusively and not iOS 10, then an iPhone 5s bought on 20 September 2013 is going to get this fix. If Apple release an iOS 10 update and you bought an iPhone 5 on 21 September 2012 you're covered too.
Re price stability:
A cryptocurrency adopted on a mainstream level (at tens of trillions of dollars market cap) for means of everyday payment would be very stable, more stable than any fiat today.

Re effectiveness: Bitcoin itself is not really fast, scalable and transaction fees are not that small anymore, but something like Dash for example can be much more effective than Fiat even at a large scale. (I mean small latency, small transaction fees, high throughput.) Should scalability become a really big issue, I am sure it will be solved by some projects. (There are already projects working on extreme high throughput like EOS.)
Cryptocurrencies indeed move the trust from a centralized accountant to a distributed system guarded by both code and math. Instead of trusting a mostly anonymous group of people that stand to gain from abusing that trust and have done so in the past without punishment, crypto replaces that trust with user-controlled software and verifiable algorithms.

Any transaction between fiat and crypto requires a modicum of trust, in the same sense that buying something with a credit card requires some trust. Once you are inside the crypto bubble, that trust is no longer required.
I'm using https://lineageos.org/ (previously known as CyanogenMod) on most of my older Devices. I think this is as close to an open source OS as you can get right now.
Not-so-SOLID OO Principles
KRACK warning: Severe WPA2 security vulnerability exposes millions of devices
Haha, well not too sure.

For one, Facebook isn’t a human connection, it’s really not. You’re not really friends with someone you haven’t spoken to in 5 years.

On the other hand, we’ve been attached to human connections since the begging of civilization. Not sold that would end in 10 years time.
Ask HN: Stripe – high decline rate for international payments?
Hi, I’m looking for some advice. We are a UK company that sell physical products, roughly 35% of our sales are to the USA. We partner with a fulfilment provider so that US sales are actually fulfilled within the US so that there is no international shipping.

In the UK we see a roughly 97% success rate for for credit card transactions, however, in the US this drops to around 80-85% which is impacting our customers’ experience. After much investigating we believe the issue is that some US card issuers don’t allow credit and debit card payments to an ‘international’ business. So far we have tried the following to try and mitigate the issue, none of which has made any difference:

- Implementing 3D secure, so that all US orders with cards that support it are required to go through the 3D secure process.
- Hosting the checkout page for US orders on a subdomain that is actually hosted physically (with an IP address) within the USA.

Most of the payment errors in the US are ‘do not honor’ and ‘transaction not allowed’.

Has anyone else experienced similar problems with international payments and what have you done to successfully improve the success rate of card transactions?
The researcher's reaction is correct. OpenBSD maintainers' lack of patience may have led to this vulnerability being discovered and exploited by other people.
WhiteHat | Elixir Fullstack Engineer | London, UK | ONSITE | Full-time | https://whitehat.org.uk/

WhiteHat was founded to address the lack of high-quality, career-focused apprenticeships on offer for ambitious young people. We're looking for a mid/senior engineer to help create the first version of our platform - an Elixir/Phoenix project to showcase the hidden talents and potential of young people.

If you're passionate about Elixir and making an awesome product this might be an exciting position for you!

If you're interested, please apply here: https://whitehat-2.workable.com/j/190C2CA43C
As a user I am completely fine with that.
Top Tips for Cars and Bikes  Repair Service
The lightning network is one of the proposed solutions for scaling bitcoin further.
Isn't this what "List-Unsubscribe" header is for? The email client should display Unsubscribe option instead of Mark as junk or offer to unsubscribe first.
> I'm personally not sure which VPN providers are supposed to be trustworthy to begin with.

I can recommend Mullvad[1] which takes none of your information for registration, and which ticks all the right boxes on That One Privacy Site's VPN comparison chart[2].

[1] https://www.mullvad.net

[2] https://thatoneprivacysite.net/vpn-comparison-chart
Robert, this seems an exciting project (I've already looked at it when I stumbled upon previous announcements) but it's lacking a "what's in it for me" factor, and at this point, I effectively don't know if it's for me or not.

"Ray is a flexible, high-performance distributed execution framework." is certainly a nice tagline, but I'm pretty sure there are other projects in this domain - what's the USP ? who's using it and for what ?