skysight-inc/HackerNews huggingface dataset:
Controlling the ABS hydraulic modulator and ABS diagnostic bleed are one of the most dangerous cyber-attacks that can be performed on a car.

The fact that these systems are (indirectly) connected to the Internet is irresponsible.
Because they define-away the scenarios where UB is an issue for most code. Sometimes they do this by having a GC, but Rust and Swift prove that isn't necessary.

Such languages typically do provide some form of "no promises, here there be dragons" in the form of unsafe blocks or functions. Restricting this region of unsafety is a huge benefit for programmers and compilers. Programmers because relatively few pieces of code need to be carefully reviewed. Compilers because most of the program contains little or no UB.

As a typical example, in C you can alias and type pun. Therefore to avoid all UB the compiler would need to be extremely careful in any function containing a pointer. You could return a reference to a local through a separate opaque function call, or receive multiple pointers all aliasing the same memory. To completely avoid all UB means inserting checks after every potentially mutable machine instruction, or emitting duplicate function bodies that take different paths when the pointers alias; that's assuming the compiler even has enough type information to answer the question!

With typical C#, Rust, Swift, etc you just can't cause those kinds of problems without deliberate subterfuge and use of Unsafe types or blocks.
A good team knows how and when to share information.

True. Scrum is a floor, not a ceiling. Nothing prevents the team from going above and beyond the daily standup and the sprint review in terms of communication, and I've never been on a team that didn't communicate a lot more than that. But doing that standup every day ensures that there is at least a minimum of communication, every day.
"Why I review Products?
I had a very bad habit of commenting my opinion on the posts of Hacker News's Show HN section. Some product makers liked my comments and appreciated it while others thrashed me for the truth."

I mean I can look through the author's HN comment history. There were only 4 comments on Show HN posts. All of them one sentence or less and all very positive. Can't find a single downvoted comment or negative reply to a comment.
You're comparing Scrum to a phantom. State which specific practices work better than Scrum in specific situations. Otherwise it's just a complaint with no useful contribution.
No, you wouldn't use a "customer number". The usual approach taken for these genuinely concerned outfits goes like this:

1. Agree contractual terms with particular Certificate Authorities in which all certs for names in your hierarchy need explicit approval from your security people.

2. Set DNSSEC-secured CAA records for your names forbidding issuance by other Certificate Authorities.

This funnels requests from hypothetical bad guys into your security people, which is exactly what they don't want. It loses you the shiny capability to do "spur of the moment" issuance, but presumably if you want these sort of terms the phrase "spur of the moment" causes you to start writhing and clutching your throat anyway. Insider threats will usually be much _worse_ than outsiders.

As to things being "specific to a particular browser" we can't and don't want to be able to force, say, Microsoft and Apple to do things just because everybody else decided they're a good idea.

The same with the trust store programmes. I can't make Microsoft take this seriously, but Microsoft can't make me use their SChannel and associated trust store. Maybe you have a lot more pull with Microsoft than I do.

If we're in a world where the "easiest" way to get a bogus certificate is now to do global BGP hijack of an entire /24 then I think we're on the right track.
Can't tell if sarcastic or not
We need a -Osafe flag.
The sky is not falling.

There are immense quantities of certain creatures in the ocean that take CO2, emit O2, and eventually die and sink to the bottom of the ocean, thus building deep layers of sediments and sequestering enormous amounts of carbon.

They've been doing this for almost 2 billion years: phytoplankton account for about half of all photosynthetic activity on Earth (thereby consuming CO2); 50-85% of the oxygen in the atmosphere is produced via phytoplankton photosynthesis. There have been past periods with at least 10x the current CO2 level, yet all of these oceanic organisms have thrived through it all.

[added] The massive accumulation of dead plankton in sea floors for millions of years is the primary origin story of oil and coal. Clearly oceans are a very large carbon sink.
And when the problems have systemic implications, and are the result of policies/actions from those at the top, with whom the accountants are golfing?

This was the point of the article -- accountancy was supposed to provide a guard function -- checks and balances. Now, it is merely a compromised credentialing service.
"And requiring companies to provide equal communications services to people who opt out of data mining, they say, could cause sites or apps that rely on data-driven advertising to start charging fees or close down."

This statement starts with the assumption that the data mining was okay in the first place. My metaphor is a bit hyperbolic, but it's like members of organized crime complaining about the passage of RICO in the U. S. "Well, now how are supposed to make a living?" Mmm, you weren't supposed to be making a living through organized crime in the first place.
Not when you need to use certified compilers.
The also have the highest "daily time on site" of all the sites on the list by a good amount. (15m vs 10+m for runner-up Facebook)

That said, are these numbers reliable? And: Don't a lot of people visit FB via an app? I assume that's not counted here.
What’s sorely missing is guidance (or code) that can help empower more people to create things like this.

http://worrydream.com/Tangle/
Thx to Aaron.
I think very, very few articles actually want to touch on the reason that Agile/Scrum goes bad: Lack of management/client buy in. If management or the client aren't going to work in an agile manner as well, then that just puts the devs at a disadvantage, and makes for a crappy work environment. Devs lose any agency they had in terms of what to work on, and as a result become disgruntled and stop caring about the work.
That's exactly what's going to happen.

I can create a business model in the US market - in the vast majority of nations in fact - that can't exist in the EU, pay for it with targeted advertising in the US market and give the product away for 'free.' I can scale it with US ad practices, then move into the EU with full GDPR compliance and continue to fund that product with the vast, lucrative, targeted US ad market, doing things with customer data and generating margin that is impossible in the EU. The EU can't project its jurisdiction globally to prevent this approach.

GDPR is a massive win for US companies, it increases the already overwhelming US competitive advantage. The US tech giants can trivially comply with GDPR, and the EU ends up as more of a tech hermit kingdom with every restriction and compliance requirement they put into place.

Starting and building a company like Google or Twitter in the EU was very difficult before, now it's impossible. Every future Google in the West will be born in the US perpetually from here on out.
Oh please. I've been using C99 for almost 5 years now.
Yes, because limiting connections by putting them in a queue is how you maintain good response time.
Facebook Testing and Verification Research Awards
It probably don't help that Intel decided not to officially support 8Gbit DDR3 and that not all Skylake laptops were DDR4. It is also funny that DDR3 ended up lasting more than a decade.
I am still sad about how corporate greed caused his death
> Why wouldn't a corporation reinvest those tax benefits

Because they're historically linked to stock buybacks and M&A activity. The ROI is usually much more clear-cut.

Does anyone have evidence that a retailer of Walmart's size investing in customer service and employees nets a positive ROI?
This seems like it may be a victim of the narrative fallacy, trying to make this one simple narrative explain the results of a complex system (the bitcoin market).

Everyone has a pet theory as to why bitcoin crashed: regulation, "whales" selling large volumes at once, institutional investors, Futures trading, etc.

What's the real reason? It's probably a combination, and almost certainly more complicated that solely "bitcoin futures."
The problem is that "fixing speculative execution" means "stopping to make things faster in any measurable way". Given that the caches are there to make things 2 orders of magnitude faster, this is rather crippling.

The hardware based protections are the only boundary where you can "fix" speculative execution without slowing down your system by 100x.

The hardware boundaries effectively act as hints that say to the hardware "slowing down things by 100x here won't kill performance too badly -- we should turn off speculation for safety". Without those hints, everything needs to get that much slower.
Languages like Ada and Modula-2 were already proving it long time ago.

Or to go even further in the past, NEWP, still alive on Unisys ClearPath mainframes.
With the proposed method, you can fit arbitrarily closely to the data, so you can get your likelihood as good as you like, still using a single parameter. So you get good k(=1) and good likelihood, thus good AIC. The likelihood does not need to dominate the other term, it just has to be as good as the likelihood of the model you are comparing to.
DuckDuckGo is a search engine - meaning its possible to use their tool without the collection of any data, even creating a user account. Many other tools are doing nothing nefarious with data but its not possible to use their tool without collecting data.

It's neat that DuckDuckGo was able to find a business model through showing ads based on what you search into the search box. For me personally, I don't see much of a difference between being shown ads on what I searched at that moment and having a cookie stored in my browser and getting showed ads based on that later on.

None of this disproves what the article is saying anyway - Google & Amazon will be the best equipped to handle the nuances of any data laws and as bureaucracy increases, they will benefit the most, storing more data.
I guess I read different news than you. I’ve read that most of the money is going toward stock buybacks. The pressure on wages is coming from a tighter labor market. That’s what I’ve read but I don’t know enough to say one way or the other.

https://www.marketwatch.com/story/now-we-know-where-the-tax-...

http://money.cnn.com/2018/02/09/news/companies/tax-cut-bonus...
> while I'm glad to have Rust available, I prefer concurrency (when I need it at all) via processes, rather than threads, with no shared memory.

Are you implying that Rust can't do multi-processing through processes?
Links posted by YC alum/admins appear different in color for them, this makes it a voting ring feature built in because of this.

Most likely they also have a different weight mechanic.
Wait a second, you don't want more of this "high quality", "totally-not-retread", "seriously-not-trying-to-get-you-to-sign-up-for-our-lawfirm" content that Sam Altman assures us is as much of a must-read as Paul Graham's essays? What is wrong with you!?
My 2009 Core 2 Duo laptop that I'm using as a Plex Server came with 8GB RAM. The same amount of RAM that most PCs start with today.
> there is an army—mostly young, mostly white, almost entirely men—that marches behind him. These MuskBros, as we call them, make it their mission to descend on women who criticize Musk, and tear them to pieces.

I would berate this author for making an article with such a hamfisted premise, but as a young white male, I would then be fueling her confirmation bias.

Best to ignore it, along with anyone else trying to make #MuskBros a thing.
As related material that folks here might appreciate: Andrew Yang’s (founder of Venture for America) recent book “The War on Normal People: The Truth About America's Disappearing Jobs and Why Universal Basic Income Is Our Future” lays out a compelling argument for UBI, given the rise of automation and AI, as well as current economic and cultural shifts.

Yang is also running for president 2020 on a UBI platform, dubbed the freedom dividend.
It's worthless if this is another one of the experiments that certain people always insist we need to actually validate Basic Income's tenets.

It's brilliant if you're trying to demonstrate to people with deeply-held beliefs against BI that the principles actually work in real life.
He had been hacking yahoo for seven years and selling account details for a $100
Presumably the compiler team wrote a test for that behavior so there won’t be a regression. I assume that Windows isn’t planning on switching compilers, so they can rely on that behavior as long as the Microsoft compiler passes all its tests.
I wonder if it was on purpose or accident that the LTS release of .NET Core coincides with the LTS release of Ubuntu...
It’s possible to cheat, but (1) why bother? You’d only be cheating yourself; (2) how do you know to cheat if depression has snuck up behind you, and that sneaking is what you want to be automatically alerted to because depression doesn’t tell you it’s depression it tells you that you suck and it’s all your fault and you deserve it.
That was very a concise TLDR. Thank you.
You need to make sure you turn off prepared statements if you want to use pgbouncer in transaction mode with pgjdbc.

FWIW we use it in exactly that way to serve many thousands of rps with no issues.
Sure maintenance engineering is usually a good fit for Kanban. If a high priority defect report comes in you don't want to have to wait two weeks to include it in the next sprint plan. Just move it to the top of the backlog and fix it tomorrow.

For larger products with multiple teams working on the same code base it can even work to have a mix. The feature development teams follow Scrum (or something similar) and the maintenance teams follow Kanban.
While that's great, the boss is still the boss. I don't feel that any kind of parity can really occur when one party has the ability to pull the, "Do it this way and in this time or I take away your ability to feed and house your family," card. And while the vast majority of managers will never come out and say this, or try to not imply it, the implicit threat is still there.
Rails 5.2 adds allow_other_host option to redirect_back method
I've recently been thinking that Reddit holds a lot of potential that has yet to be tapped or expired. The recent pivots post CEO change (mobile app, redesign, crackdown on garbage) speak to a future where currently fractured private communities such as those on Discourse or Slack can find a more publicly accessible presence. Facebook Groups, while immensely popular, currently falls into the same opt-in, zero-discoverability category.

The timing couldn't be better with the hollowing-out of Tumblr.
> AI winter is not "on its way". There is AI hype and anti-AI hype, and then there is actual practice. This article is anti-AI hype, just as bad as its opposite. In practice there are tons of useful applications.

I don't think the article was saying that AI isn't useful, but just that deep learning specifically is not an AI panacea, and that the current hype around AI is on its way out. The hype dying down and the associated buzzwords starting to repel money instead of attract it is all that's meant by AI winter, I believe, not that we'll run out of places where the techniques would be useful.
I think removing red tape and allowing people to pay for things they need right now is an excellent way to speed people's recovery from poverty, but it needs nudges, and those nudges need to be informed by data and empirical evidence. We need to know what people are spending the money on so we know how to target the biggest problems as well as the corner cases.

If you know what the actual problems are and where the money needs to be spent, you don't need to give everyone $10,000. You may only need to give this person $2,000 for this thing, and this person $7,000 for that thing. Giving them all a lump sum is just inefficient, and does not address the myriad edge cases. Collecting data on spending could help provide efficiency.
In other words if you live anywhere in the country outside of a couple of cities.
It wouldn't really be UBI, but still worthwhile data for programs with work requirements.

I'm rather fond of the idea of work based programs. For example, for every $1 of W2 income you earn you receive $1 bonus, up to a cap of say $7,500.

This boosts wages on the low end and strongly encourages employment. Funding this through income taxes and you won't have to kill off risky / low profit small business with local living wage requirements.
I agree. It's just any other welfare system unless it's distributed universally or randomly
Of course advertisers should be forced to spend their money on anti-feminist propaganda, everything else would be downright undemocratic!
No, but self-hosting has a significant initial investment overhead cost compared to the places where Amazon and eBay deliver almost for free.
A common belief is that ABS always makes braking better. That ignores the situations where it can make things worse and you should probably turn it off.

It's not simply a question of excess speed. One very common situation is where housing estate minor roads have ice or snow, but other routes are cleared or gritted. Most would probably drive in that. ABS can leave you with nearly no braking and in a far worse position than if you'd just turned it off. You might be moving at 10mph or less but slowly sail, with no control, from the minor road into a major road at a junction, or into parked cars.

If it's sheet ice everywhere stay home. :)
I'm curious what a use-case for this service would be. Why would I want to use some company's favicon for my own website?
Facebook has/had targeting option “recently in this location”, which would eliminate everyone who lives around.

https://www.facebook.com/business/a/location-targeting
Pooling is more a problem with larger frameworks like Rails(Ruby) where a connection is automatically checked out of the client pool for you on every request and held till the end of the request. If you're doing other work on the request, like network calls or non-DB related slow stuff, you'll quickly run out of connections.

A separate pooler makes sense here because it'll let Rails imagine it has how many ever thousands of connections it needs open, but map them to real connections only when usage actually happens.

This is easier than taking over connection management manually in the code, which the only other option.
>The timing couldn't be better with the hollowing-out of Tumblr.

What happened? I haven't heard about this.
The difference between programming and software engineering is the difference between cooking for yourself and cooking in a restaurant kitchen. Similar outcome, radically different methods.
It’s really not worth doing this because the back and forth latency of SQL is much worse than proxying a HTTP/RPC request to the app server sitting next to the DB and getting the final result back.
DDR5 is around the corner though

Cadence and Micron Demo DDR5-4400 IMC and Memory, Due in 2019
https://www.anandtech.com/show/12710/cadence-micron-demo-ddr...
Which is to say you don't have to care much at all, seeing as you do NOT need to inform or obtain consent from users to keep web logs that serve a 'legitimate interest' such as fraud, security or spam prevention.

Obviously if you were in the business of leaving such data insecure for anyone to obtain or merrily selling it on to reap as much dollar from your visitors as possible then you may be in for a bad time.

Otherwise it's just best practice to do what GDPR says anyway in the example you provide.
I have a controversial opinion about this.

I was exposed to this in the beginning of my university period and at the time found it mindblowing. But now, many years later, do I actually regret it and wish I hadn't taken this as seriously as I did. Wishing everything I was learning was visualized, and ignoring means of teaching that weren't styled to "my type of learning" (i.e. visual) – primed by posts like this – actually prevented me from taking the effort to learn how to learn via more traditional methods, like through books. It's only now that I've realized that learning purely from visualizations (rather than being just a small aid at the end of personal sweat and effort) deprives you from reaching an end-state of utter subconscious comfort with the thing you're trying to learn. Reading and forcing yourself to parse and make sense of a book brings about a much richer, personal, and flexible understanding which is more interconnected with other things you already grok (and this is not a skill anyone is born with; though different people might have different starting positions).

Visualizations are great for shared intuition, but it should only be used at the end of a long personal struggle which should involve hours upon hours of undistracted effort, preferably involving something tactile like a pen and pencil.

Another problem with visualizations is that they essentially act as a certificate for "final understanding". People play with a visualization and think they understand the thing (like eigenvalues) because someone said this is what you need grok in order to understand the thing. But as any pure mathematician knows, that isn't where true learning ends. Only if you're personally convinced by a proof, without any need for external authority, should you stop making it any clearer. It can take multiple iterations of a linear algebra course to reach full enlightenment of what eigenvalues are. True understanding only comes after you've seen it from many perspectives.
Read the article; this is the second sentence:

> The giant retailer said it would pay tuition for its workers to enroll in college courses, online or on campus, to earn degrees in either supply chain management or business.
I thought it is talking "California City" but Stockton.
https://goo.gl/maps/o8fp1f18Hf32
I mean, if you want to do the "No True Scotsman" thing, sure. But I think it's really counterproductive to handwave away a lot of the common problems that occur.
Are or were any of them experts on the things that IBM wants done? Are the involved in the communities that IBM wants work done in? If not, then they're still a net drain while they come up to speed, and engaging these communities and spreading out some money in the form of bounties makes sense.
Provided Walmart is paying enough

They're not.

Edit: I realize my original comment was glib, but it's well-documented that a large number of Walmart employees don't make enough to live on: https://www.forbes.com/sites/clareoconnor/2014/04/15/report-...
Inside the world of instruction manuals
NPR did a good piece about the non-profit mentioned in the article: https://www.npr.org/sections/goatsandsoda/2017/08/07/5416096...
These think pieces are meant to reinforce Altman's image as a tech industry theorist a la pg. It's really just advertising. But he's not nearly as good at it as pg was.
C'mon it even has some kind of primitive generics support nowadays, which other modern languages keep ignoring.
All his stuff are fluff pieces, it's like listening to a pitch coach. I have no idea why people see him as an authoritative figure in this space, when all he had was 1 failed start up.