skysight-inc/HackerNews huggingface dataset:
Looking at the paper, it seems like most of the duplication is coming from folks who commit copies of library code into their repos. I think there are valid reasons to do that, and anyway it's not something that can be solved by programming language design.

Apart from that, most of the duplication is auto-generated project skeletons for frameworks like Django or Angular. I dislike frameworks as much as the next guy, but there's value in having a standard folder structure across different projects. So not a case for programming language design either.

Another widespread case of code generation that wasn't covered in the post is cross-language definition of structs or APIs. That's also not a case for programming language design, because the whole point is interoperating between languages.

In summary, we don't yet have a strong idea how analyzing code duplication or generation can lead to better programming language design. The conclusion might still be true, but you need to work a bit harder for it.
Mitmproxy – Open-source console-based proxy
That's amazing. I'm not sure how obvious it is to frequent React devs as I haven't done much in the way of React, but rendering a null component out to be able to compose the Tone is just so clever.

Is that a common pattern in React world?
Did they pinky-promise to delete the data? Sorry, but that is beyond naive.
Lots of drivers on Windows, OS X and Linux run in kernel space simply because kernel-to-user-and-back context switches are expensive and so kill performance.

I believe the exceptions are printer and scanner drivers (these run in user-space CUPS in OS X/Linux), some filesystem drivers (basically, FUSE-backed) and cheap-ish USB drivers.
Hapi is the best api/server framework for Node. It's structured without being too opinionated.
It’s true that unlike Facebook and Google, Apple is primarily a B2C company.

However, aside from their own dark-UI patterns and walled garden strategy, Facebook and Google provide the killer apps for Apple’s highest margin product. And Apple absolutely do care about engagement on the iPhone; it’s highly predictive of buying a new one every year.
For the same reason people drive with their “check engine” light on: It’s frequently better to have a working system (i.e. “I’m late for work”), than to chase an indicator that may not represent a real problem (an actual security intrusion).
Advice AGAINST reference solutions or examples for how to achieve compliance; they will cause paralysis and market stagnation.

An example of this can be seen in data-science related to FDA activities; there is an incredibly heavy bias towards specific proprietary software and data-storage formats (and I don't mean Microsoft).
Every organization pushes an agenda, independent journalists included. Having an agenda is part of being a person, and that's true even if you genuinely believe in reporting the truth. The people selling themselves as purely objective are the ones lying (even if also to themselves).
Very nice. I don't read PDF in Emacs, but I also use an org file for notes, with references to the file and a bibtex file. When I use org-mode to author articles, the references used are multi-purpose: from Emacs, they link to my notes, but when translated to LaTeX, they become citations. See:

https://github.com/leethargo/etc/blob/master/emacs/.emacs.d/...
This is an op ed. By David Brooks.
API documentation and usability is so severely lacking, even in products you would expect to deliver something excellent. I work for an ISP, and we've recently acquired industry standard software for things like DDI/IPAM and so on. The software, annual licensing and so on for some of these products is 5 to 6 figures, yet the API(s) are a mixture of ambiguous REST, undocumented SOAP and a day-to-day nightmare.

The only breath of fresh air I've had lately is interacting with the NetBox API which uses Swagger to sort of self-document and allow for testing.
But you have to put them somewhere; how is idk, AWS credential management secured?
This is something of a pet peeve of mine. Somebody will post a hunting video or whatever and people, who otherwise enjoy meat, will freak out watching an animal die. The irony is that the way these animals die, with a clean lung shot or whatever, is a vastly more humane than the stuff the mass production meat you buy at the store is put through. They live their lives in the wild open and free as they see fit. And after a few seconds it ends with their brains so full pumped of endorphins that they likely don't feel a thing.

Compare that to store meat and you're looking at things that lived in cramped uncomfortable quarters and spent their lives being pumped full of antibiotic agents just to try to prevent them from becoming too sick before they're sent off a slaughter line where all their senses are going to inform them well ahead of time what's coming. And then enter in things like the growth hormones we use (that have been banned in much of the rest of the developed world) that often result in ongoing pain and other issues for the animals again before they're lined up for slaughter. Then there are straight up sadistic things like foie gras. That involves force feeding animals, generally ducks, to increase their liver to ~10x its normal size by shoving a pipe down their throat and jamming in "food" over a period of many weeks.

Cooking that lobster (or hunting deer or whatever else) is vastly more humane than supporting our meat industry. Like many things that happen on scale, ethics are quickly replaced with an insatiable lust for profit. I enjoy traveling and something I like more than anything else is to go into a chicken and rice shop and see some chickens freely pecking about around the shop. We should understand where our food comes from, and give it the respect it deserves. That doesn't mean not killing it, but it does mean giving it as reasonable a life as possible in the interim.
Yes. Some people I know argue that they'd rather wait-and-see rather than just flatout deny it, quote, "Because I've been screwed other by Internet Companies and Cable Companies have been rather nice so far. I think I'd rather pay less for my Internet to only use Facebook tbqf"
My thoughts exactly. Randomised booster packs are basically a kind of gambling. And I know from experience that they can be addictive.

But if gambling should be banned, why are lotteries still allowed? They are arguably the worst kind of gambling.
Because the biggest companies on the planet are tech now, mostly. They're all enormously profitable and pay a scandalously low rate of tax.
a lot of people stopped making a distinction between the two.

That's probably another source for the trouble we've got with the so called fake news, because a lot of said "news" actually isn't news, but well written opinion pieces.
Sure. It's hyperbolic, but it's definitely not a joke.

Also, the two aren't as far apart as they seem at first. There are a variety of groups for helping people quit games. [1] I've had friends say it was easier to quit smoking than it was to quite Warcraft. And when doctors say, "sitting is the new smoking", they aren't just whistling dixie. [2]

[1] E.g.: https://gamequitters.com/ or http://www.olganon.org/ or http://cgaa.info/

[2] http://www.cnn.com/2017/09/11/health/sitting-increases-risk-...
USB-C is used for all sorts of devices many of which are unplugged frequently.
EFF officers won't be able to vacation in Australia.
Depending on what you mean then booster packs will usually be pretty clear in what you get, loot boxes do not

Edit: I see now you mean randomised ones, and I wholly agree with you
Needs more Oric-1/Atmos! ;)
A man is about to launch himself in his rocket to prove the earth is flat
When the invalid write overwrites some piece of data your application doesn't care about (or more likely some feature in some driver you don't care about). Especially when the trade-off is the web site goes down.
Hey, maybe http://zenkit.com would be an option for you. You can create different data collections (Kanban Board for example) and then add your data there. There´s also a pretty cool global search feature..as your notes are becoming more and more they might be harder to find so you can just search throughout the whole app. Web-based platform - super easy to use.
No, no, no.

CDN is different than throttling your Internet.

A CDN is like having a local power generator in your neighborhood, throttling your Internet is like charging your house more for electricity, because the electrical company prefers your neighbor.
I agree! And the list could be so much longer...

It seems also that precisely the privacy-destroying centralizing ad-selling machine companies, are the ones that occupy all our mind-space and have the money and technically interesting challenges. (Oh, and there is also fintech!)

I now am doing ok freelancing (mostly for my previous employer and some other small music software companies from Berlin) and doing some open-source on the side. But it is often hard to motivate myself to get out there and network or find stuff to earn money. Sometimes I consider going back to academia, but my feeling is that over the last years the attempts at quantifying academic output have risen competition to completely unhealthy levels (as my academic friend says: if he has to think in 6-month/project/paper timelines, where is the "long-term" in publicly funded research?).

At least it is easy to find a job that pays decent, which is a very good position to be in compared most of my friends of my generation. And I love software engineering itself. Yet I often wish I could just go on UBI and do open-source stuff all day.
If they are fined or in contempt of court ... I would recommend consulting with an Australian lawyer and then the Australian embassy before boarding a plane to Australia.
This is false. During QE, inflation rate was below target, so less value than normal was removed from EUR, GBP, USD, etc.
Because you'd rather just do your work and not have to deal with unnecessary kernel panics?

If the system can continue running, it should do.
Say there's a minor error in a network driver. Yes, it might be exploitable by a smart person. But the error only triggers once a day when a counter rolls over.
Do you really want your box to lock up and panic when this error is encountered, or do you just want your box to keep working.

I'm firmly in the first camp (I'll take lock up and freeze thanks) but 99% of users don't care about a bug like that and just want the box to keep working.
> Apple is not screwing developers, they're keeping them under control

Their entire business model is predicated on the idea that hardware is important/ worthy, and that software should be $0.99 with free updates forever. It's basically the opposite of Microsoft - what MS did to the OEMs, Apple does to the indie devs.

Also: not sure about your family, but I can choose stuff like "what keyboard to use". For me, that's a kind of freedom too.
I'd wager you have zero power in your organisation to I fluence corporate structure and tax policy. If you do, I then wager your organisation is so small that it doesn't matter. And the same goes for effectively everyone.
Really surprising to see that sensitive credentials were checked in to VCS. Apart from peer code review, how can a company avoid developers checking in sensitive data to VCS?
You better back that up with additional data, because for now it sounds unbelievable. When was this, what OS, which Chrome version, were you able to replicate on a clean install, what was the name and version of the Google plugin, and put a few screenshots on imgur too.
It's not 5 or 10, every single domain provider have banned them so far. Still happening today.
It's a deliberate trade off. Not panicking results in uncaught exploitation attempts, and panicking will result in crashes where a vanilla kernel would happen to survive.

It should have been made a sysctl toggle.
ProtonMail Contacts – the world’s first encrypted contacts manager
The logic behind why it is done like that I get. Just wondering as You said is it possible to push at least the most bug-prone and exploitable ones to user-space
Some experience for me. Unfortunately, after a couple of years, it was also easy to relapse when my social circles changed.
> the people putting up the capital

If you look at the balance sheets of many very profitable software/service companies, particularly those that use the cloud but do not provide the cloud, you will see that the concept of 'capital' is not what most think it is. There are almost no physical assets there to justify calling the system 'capitalist.' The rate of return (free cash flow) on assets is astronomical. For example, I have recently worked for a firm in which the assets and annual return to shareholders were each equal to about 2 months of revenue. And most of the assets are either cash equivalents that the 'capitalists' have simply squirreled away out of past earnings, or agreed-upon fictions like deferred costs or goodwill, or monopoly rights (intellectual property) created by the government for the corporations.

This is not to say that successful entrepreneurs do not have extraordinary talents at what Barnum called "money-getting." But it is hard to call someone who starts a firm for $1,000.00 in his garage and sells it for 10 figures, or someone controlling a similar firm who has already recovered his initial investment 100,000 times over, or a hired-gun employee slash-and-burn CEO who is given a few million in shares to motivate more money-getting, a 'capitalist.' Especially since the $1,000.00 probably went for things like telephone and answering services, stationary, advertising, legal fees of getting set-up, or finding a first customer, which are expenses, not capital, and none of which are recorded in the firms capital accounts. Our respect for capitalism is so overblown that we take it as given that any making of unimaginable amounts of money by means that no one understands is an example of 'capitalism,' because if it were not, the reverence for capitalism would be called into question.
Seedcamp celebrates 10-year anniversary with a new €46M seed fund
Yes, this has been my experience with various companies attempting to do this - however there's been a lot of progress recently in both cloud vendor standardization and the rise of containers and kubernetes that makes this much easier.

Running multiple Kubernetes clusters in different cloud vendors with configuration details abstracted away in a more self-contained service that can be deployed by itself as the bootstrap process makes things much easier. Consul is a good system for this, deploy it once (manually if necessary) then everything else refers to it to figure out the environment details automatically.
Absolutely not.

If “do no harm” is a principle, then the kernel should ensure that no harm is taking place.

If flaws within the kernel allow harm to occur while otherwise normal transactions are occurring then it is absolutely preferable to panic and shut down over allowing that potential harm to occur.

To suggest otherwise, that detected errors that allow harm should be allowed, is pure insanity.

Linus is unquestionably wrong in the regaurd.
Are men not allowed to teach? Adam Ruins Everything is an educational show - they’re all actors
When I was young I had many earaches, and they had to put in ear drops and a cotton ball to keep the medicine from coming out of my ears. I heard a noise I could not explain, it sounded like radio noise I said at the time. The doctor thought I said static but it was more like radio feedback.

I had a hearing test, and I was told I had normal hearing.

It comes and goes, and at times I can ignore it or it dies down for a while and starts up again.

Doctors say it is not Tinnitus, I am not sure what it can be?
When I joined my company I got given a laptop which was utter shit. The keyboard barely worked, the display was awful, the hinge squeaked, the trackpad felt awful and the charging port broke - despite it costing a fortune.

I also didn't feel comfortable requesting a new laptop immediately, but eventually got a MBP. I didn't feel the need to write an article about it though.
Servers: yes, phone/home PC: no. Maybe my dev machine but my wife wouldn't be happy with a kernel panic while writing an email. Like Linus said, this would go unreported with the average user because they just reboot in annoyance.
Store credential information where it is used. It is not used by the repository, so it is an improper location for it.

If someone gains access to a system that uses the credentials, then there is, in principle, no difference between puppeteering that system versus stealing its credentials.
Either:

There are lots of fellow hacker news readers (with significant karma) that don't know a thing about Net Neutrality.

Or: this thread is full of FUD bots to push against Net Neutrality
Also CockroachDB supports multiple regions as a postgresql-compatible database and Apache Pulsar is next-gen Kafka with multi-region replication built-in.
It's interesting to see this laser focus on a particular kind of user. If you're running Linux on a server, you're a user, but unless you're very irresponsible you would probably rather your programs crash than give away private information. Your interface is to a cluster of machines where individual crashes are probably not that big a deal.

If you're running Linux via Android, you're a user, but mostly you're a user of actively developed apps on top of an actively developed OS, usually pegged to specific kernel versions. Your interface is to that layer on top, and given that its code is written by app developers and hardware vendors who will ship anything that doesn't crash, you probably want security bugs to crash.

It seems to me that the kind of user Linus means when he talks about "the new kernel didn't work for me" is a user of Linux without any substantial layers on top, where kernel updates happen more often than userland software updates, and where individual crashes have a significant impact. In other words, users of desktop Linux.

But I wonder if that focus on desktop Linux really reflects the majority of users. And, if not, perhaps it might make sense to have "hardening the Linux kernel" as the first step if it makes "raise the standard for the layers built on top" the endpoint.
I think he meant competition between different dialup providers, and different DSL providers.
That makes no sense. We're not talking about a commodity that's for sale and thus, loses its market value as the market becomes saturated by Chinese knock-offs and look-a-likes. It's more than just a show for the mindless consumption of viewers on social media. Primitive Technology videos came from his own personal interest and love for the art of craftsmanship itself, thus, his videos have not lost any of their value, as his motives and drive were never commercial to begin with.

It's your option to eat fast-food, but in no way does that devaluate high end cuisine.

edit: typo
There are still thousands of actively developed extensions.

I get that you're mad about some of your favorite niche extensions being unavailable due to relying on XUL functionality that shouldn't have been there in the first place, but you'll just have to find alternatives.
I’m so glad that backwards thinking concepts like this are dominant, otherwise we might actually have secure software!

Think about it, an open-source OS is choosing backwards compatibility over security. This would have caused quite the stir in the 90’s Linux community.
What all parts of the stack are you talking about?
Money will go to ISPs and their partners.
I don't think how Comcast having more money is a good scenario.
Also it feels like the OP is conflating Git and GitHub.
I think the earlier message drives the points home in more familiar Linus style:

https://lkml.org/lkml/2017/11/17/767

"Some security people have scoffed at me when I say that security problems are primarily "just bugs". Those security people are f*cking morons."

Gotta love the guy. :)
> From a security standpoint, when you find an invalid access, and you
mitigate it, you've done a great job, and your hardening was
successful and you're done. "Look ma, it's not a security issue any
more", and you can basically ignore it as "just another bug" that is
now in a class that is no longer your problem.
So to you, the big win is when the access is _stopped_. That's the end
of the story from a security standpoint - at least if you are one of
those bad security people who don't care about anything else.
But from a developer standpoint, things _really_ are not done. Not
even close. From a developer standpoint, the bad access was just a
symptom, and it needs to be reported, and debugged, and fixed, so that
the bug actually gets corrected.

As a developer, I do want the report. But if you killed the user
program in the process, I'm actually _less_ likely to get the report,
because the latent access was most likely in some really rare and
nasty case, or we would have found it already.

I dont think Linus has an invalid point there. Taken from his previous thread - https://www.spinics.net/lists/kernel/msg2540934.html

> Don't bother with grsecurity.
Their approach has always been "we don't care if we break anything,
we'll just claim it's because we're extra secure".

He is worried that grsecurity does not play nice with the kernel in a way of "let's make security hardening obsolete by fixing bugs in the kernel".
No. First, you never know if an invalid access or integer overflow can actually be exploited, and even if, you don't know if it can remotely be exploited. If you run a server hosting sensitive data by all means, use grsecurity but on my home PC where I browse Facebook and send emails, fuck off with your kernel panic.
What will you do when google improves chrome's speed? Will you stick to Firefox?
As per my comment, individual op-eds are not necessarily the problem, it is the curation of various articles fitting a theme across the entire paper by the editorial board.
Linus has been pounding on the bench saying "Don't Break Userspace" for over two decades now. This is really just another manifestation of that same policy. Some 'security' folk apparently believe they occupy a special place in which they are exempt from this policy. Linus is showing them they're wrong; evolving the kernel into a minefield in the name of security is not the way to world domination.
Overdraw doesn't just use some CPU. If that would be all, it'd be an easy problem to solve. It causes extra data to be transferred over various buses, extra stops in a pipeline of operations that is already cramped trying to provide a frame every few ms, and probably other problems that I don't know about. This problem isn't as easy as 'throw some more CPU at it'.
Probably not, but why is that so far fetched? They'd just need to be dissolving it with chemicals, backed up by a neural network to identify the sequence (rat's brain, anyone?). That's kind of how smell works in general to begin with.

As for why rats may develop the ability to sequence XX vs XY - if rats with the ability to do so were killed far less than those without, then rats would quickly evolve the ability to do so. This could happen if males were the ones killing rats and not females. Actually, skip the 'probably not' I began with - it's a perfectly likely explanation that may or may not be true based on further study.