skysight-inc/HackerNews huggingface dataset:
> shows how poor most non-web debugging and logging

Nonsense - web programming is inherently tied to the browser, which severely limits debugging and output options.

> The ability to mix and match data types and presentation format is extremely useful.

That's a common feature of dynamic type languages.

> Almost everywhere else we just have printf.

Most languages have logging libraries, and many have them built into the stdlib or runtime. Popular languages usually have many logging libraries to choose from.

> that’s printf going to stdout

Of course - printf(3) by definition "shall place output on the standard output stream stdout"[1]. If you want stderr or any other output stream, use fprintf(3).

#include <stdio.h>
int main() {
fprintf(stderr, "Error: %s\n", "LP0 on fire");
return 0;
}

Other languages usually handle that for you as part of the logging library.

> there isn’t a universally deployed format

Sure there is: "text"[2].

> to even allow it to travel easily over the network

Copying files to a remote host is easy with scp. There are numerous ways to send data over a network. Web software is often more work as you have to move your debugging data/logs out of the browser first or use a specialized tool that does that for you. Sending program output realtime to a remote host only requires appending "| ssh ${host} \"${remote_cmd}\"" to your command.

> advanced viewers

That's great if you have specific needs and a viewer for your complex data structures, but the only universal solution is text. Fortunately, there are many tools available to handle structured data as text.

> I think part of the problem is that programmers rarely want to get into these supportive details; they just printf and get on with it.

I think you might want to explore the work programmers have done in other languages.

[1] http://pubs.opengroup.org/onlinepubs/9699919799/functions/pr...

[2] http://www.catb.org/esr/writings/taoup/html/ch05s01.html
Thanks for the explanation.

Like I said, I know very little about the region. While I certainly laud WMATA for upgrading the cars, I definitely agree that service quality is declining enough that if I need to be in DC for something promptly, I'll usually leave 30 minutes early, and then wonder why I didn't just drive in the first place.
Fair point. Looked back in my notes and can't find a percentile breakdown of the use of options in markets. For the derivatives markets as a whole less than 7% are even options.
That would assume that it is 'different' money changing hands would it not?

I.e. that %500M and $90B is unique dollars being transacted and not just promises being passed back and forth.
You’d trust the people who run BART and CalTrain with your broadband? BART’s on time performance is 87% arriving within 5 minutes of schedule for all trains. In a place that basically has no weather. In Chicago, 83% of trains arrive within a minute of schedule during rush periods.
I have a lot of experience teaching non-programmers R. Most of them come from an Excel/SQL background. I have found the amount of weirdness that presents a real problem is very low. And when it does get weird, I usually advise we just brush it under the rug and use a different method to accomplish the same thing. This probably sounds horrifying, but it's really not. Most of the code people write in R is not like other programming languages, it's rarely bound for anything other than the end user's laptop, if its even saved in the first place.
Related question:

What is the impact of IPv6 on regular users privacy?
I know this is slightly different, but I wish more people knew about Chrome / Safari / Firefox’s “network” console tab. Great for debugging. Can look at all requests, headers, responses, timespans, etc. Some will even let you copy a given network request as a cURL command, capturing all headers, body, query strings, etc.
This is literally what trading firms try to do. If you want to know more, ask a trader.
Yes exactly, that's the idea anyway. Has a few nice features on top such as controlling the network latency and expiring recordings (useful when working on a project supported by a big team).
Pynchon - Born 1937, "V" published in 1963

DeLillo - Born 1936, published first short story in 1960, novel in 1971

McCarthy - Born 1933, first short story published 1959, novel 1965

Roth - Born 1933, won award for "Goodbye, Columbus" in 1959

Updike - Born 1932, first published in 50's and 60s

Morrison - Born 1931, first published in 1970

Mailer - Born 1923, first published in 1949

Remember that 50 years ago (from the time this was written) is 1965. Morrison is the only author you mentioned that doesn't have published works from before 50 years ago, and even then she still belongs to that same generation.

King wasn't trying to slight any of them. It's just really has been a very long time.

Edit: To compare, Tartt was born in 1963 and Franzen in 1959. I think this is really the generation he is referring to.
I would love to hear from people involved in projects like this, what kind of work/ how much, was done to get it ready for and approved to be open sourced by the company.

Especially at large corps like Netflix I'm sure there's a lot of hoops to jump through.
Answered like a librarian - with a link to an actual useful, authoritative resource. Perhaps YC can hire one to chip in to each discussion (I started typing that sentence tongue-in-cheek, but now I'm thinking that it would be fantastic. Imagine someone who added useful, authoritative resources to each discussion - rather than my having to skim through the crowd-sourced noise looking for the signal).
It's probably been easier for King to ignore his inner critic ever since his wife fished his manuscript of Carrie out of the trash and it went on to become a bestseller.

On the other hand, this also reminds me of what William Staford answered when asked how he was able to write a poem every day: "I lower my standards."
Much of his best early work was "Get blitzed on Schlitz and cocaine, and get to it"

I think in On Writing, he claims to have almost no recollection of writing Cujo.

Seriously, though, reading On Writing or Danse Macabre is fun. His style, as I recall is come up with a premise and characters, amd tell the story they lead you to. His experiments with more formal planning and plotting he feels are weaker.
So what's to stop a local real-estate investor, or twenty investors, from leasing ten office buildings in downtown Seattle long term and then subletting them short term?

Where is the WeWork moat? Buildout? Reception clerk? Meeting room reservation software? Demand forecast?

At some point the VCs will stop pouring money into it, WeWork will have to charge the full price, and then any old group of people with money can build a local WeWork clone. And unlike WeWork they won't be saddled with expectations of paying a return on the multi-billion investment spent on subsidies.
AWS Cloud Watch Logs can take JSON format log events.

This displays better in the AWS console -- and also it enables better queries than raw text, e.g. `{$.response.code >= 400}`.
I agree with the general point of the article, though the main compare/contrast of different code review scenarios seems to speak more about deadlines for code reviews than code ownership. Where I work we just expect multi-day turnaround times on most PRs so that the reviewer can schedule it however they see fit, and that does more to relieve code review stress than anything else.

Assigning PRs to code "owners" just seems like common sense to me, and is built in to github now.
Because as I already mentioned there are far bigger issues to worry about in Academia. Worrying about trivial harassment is like worrying about a scratch on your arm when you have a gunshot wound in the gut.
On the roadmap, depending on your definition of "streaming" (e.g. buffer streams, websockets).
https://netflix.github.io/pollyjs/#/README

Why Polly?

Keeping fixtures and factories in parity with your APIs can be a time consuming process. Polly alleviates this by recording and maintaining actual server responses without foregoing flexibility.

* Record your test suite's HTTP interactions and replay them during future test runs for fast, deterministic, accurate tests.
* Use Polly's client-side server to modify or intercept requests and responses to simulate different application states (e.g. loading, error, etc.).
Sure. I'd even put Gibson, Wallace, Stephenson, Asimov, and Martin on my own subjective list, just on pure influence and enjoyment. The other ones though are at least in the running by most objective criteria, I'd imagine.
Care to name some benefits?

I don't want to be tracked because information gathered can and will be used in ways I don't expect. Websites will game me on pricing, etc based on where I've been on their site and other sites. I could easily fall into a filter bubble, where I am only given results based on previous preferences. I would have zero control over the information gathers regarding my habits, and any conclusions they make based off of this data. And it will get stolen. And it will be used against me.

So I take as many steps as I can to prevent websites from tracking me.
>When you consider that much of WeWork’s revenue is likey just VC dollars paying the expenses of their tenants then the whole thing looks even crazier. VC money paying revenue of a startup that uses that revenue to justify raising more money from VCs. I have some bridges to sell.

A definition of a pyramid scheme
https://github.com/jennybc/row-oriented-workflows

getting comfortable with purrr has been enormously helpful in consolidating my code and avoiding unnecessary loops
https://news.ycombinator.com/item?id=17305979
Point made. I think you're right. : )
It is generally respectful to call people what they want to be called.
Woman sues Nasa for right to own moon dust ‘given to her by Neil Armstrong’
> But there's also no evidence to support that it hurt either.

Yes, there is. People seem to forget that a tax cut is actually a government subsidy. Coupled with increased spending, if the assumption is that if the macroeconomic performance hasn't been improved that means it hasn't been hurt, then it remained constant despite the 'cuts' + 'increased spending'. Which means that it could have grown/improved if the tax cuts were not in place.
> If the tax cuts didn't vastly improve performance then they hurt a lot.

The timescale for the determination is not left up to months. I don't personally think they were good, but to assert that you can tell right away, is disingenuous. The debt is already so large that this barely affects the momentum.
Google is definitely starting to take security more seriously with the Pixel: https://www.blog.google/products/android-enterprise/how-pixe...
I think at a certain Karma you can also change your: top bar color. I have mine set to: 9794b6. I think it was at 500 points that I could do this.
If it helps, you just made me realize I really need to read some books by these folks. Shamefully, McCarthy is the only on on that list I was familiar with before.
Python's GIL implemented in pure Python
One common thing across most the "real" programming languages makes them unfit for data work: 0-based indexing.

It is just ridiculous to call the first row in a data set as 0th row, and the last row as (n-1)th row. It does not make any sense for data analytic work.
R is a poor name, whether you can google it or not. The name can get lost in the minefield of text on the internet. Just because you never had any issues with google R does not make it any better. I have had many issues googling R and it always makes me second guess if this thread is about R language at all. On SO, I have to check if R is tagged.

R is a terrible name and it is not up for a debate. Whenever you name a product, company or in this case a language as a letter "R", you're literally asking for trouble.

Just to be fair, C is also a horrible name. On the other end of the spectrum - Julia and Rust are excellent names for a programming language because they're unique in the context of programming.
No, you would just need to get an entangled key from a distributor. Once you can communicate with one well connected and trusted actor, you're good to go.

Think more like web security certificates...
The same as ipv4.
Because he's prejudiced / a bigot?
https://news.ycombinator.com/item?id=17299838
Show HN: Cheshire: a CryptoKitties developer sandbox
Are you basing your assertions on a discussion with an attorney, or better yet, a written legal opinion, or is this your interpretation as a lay person?

To date, I have yet to see a software contract that absorbs any legal culpability. Not even high 3-comma annual renewals. The way culpability is usually handled is a clause demanding information security and/or data privacy insurance in client-vendor Master Services Agreements. If your experience with reading business contracts is different, and you've seen actual absorption of legal risk, then please tell some war stories of the contexts, as I'm always up for learning how others do business.
Netflix seems to also have a really strong culture around this though, so I wouldn't be surprised if it's a lot less hoopy than you'd imagine.
Completely agree about broken protocol. Unfortunately, I doubt their will ever be a real impetus to abandon it; we will just keep muddling along strapping ever more duct tape.

But let's dream, what would your protocol be?

For some reason I have always had a hang up on the headers. The lack of real concrete specs, forging clients, and now the ugly monstrosity of CSP. I love the effect, but in my dream new protocol we have to opt into features during some kind of app / client handshake.
Previous discussion: https://news.ycombinator.com/item?id=17305979
As I said earlier in another comment:
In that setup your browser fingerprint alone is enough to uniquely identify you, and it doesn't protect you from tracking by the first-party domains themselves.

For speed, yes, that's the cost of having your traffic go through a 3 relay circuit, but Tor is much faster now than it used to be.
It is a very, very generic coworking arrangement. Get A grade space, add services, sublet, rinse, repeat.

The coworking industry, a novelty in US, was alive and kicking everywhere else before becoming a hipster trend in US.

I'd say, WeWork, with all its colossality, is still only managed to secure single digits of the market share. In the future, it has no chances to approach even, say, 10% as competition is cut throat.
Speaking of, my favorite stupid Windows trick I discovered, was before long file support, you could get nested folders too long for Windows to handle due to some cool bugs and couldn't delete them with rmdir.

But I discovered I could robocopy sync a blank folder over them, and it was more than happy to oblige. robocopy is seemingly a more robust deletion tool than rmdir.
Correct. And?

Yes roads have benefits. They also have costs.

The benefits are greater than the costs, but we should be aware that the costs still exist.
US 5G deployment will leverage spectrum above 24 GHz where it is feasible: https://arstechnica.com/information-technology/2015/10/5g-mo.... The FCC is working on auctions of 100+ MHz channels in these bands: http://www.telecompetitor.com/fcc-proposes-schedule-for-28-g.... AT&T already spent more than a billion dollars buying up that spectrum. It’s starting 5G trials at 15 GHz: http://www.lightreading.com/mobile/5g/atandt-5g-trials-to-st...

In the US, almost all LTE deployment is below 2 GHz.
tor!
Well with https://www.facebookcorewwwi.onion/ Facebook won't even know your IP and hence location (though you're not anonymous to them).
Average Joe has one https://en.wikipedia.org/wiki/Average_Joe
I for one am pleased at the move away from RAID controllers here. This (I hope) sets a precedent calling out the vendor lock-in bullshit and performance FUD surrounding their use.

It is also a curiosity they're using Rust in place of Go for some of their stuff in this system.
“I forced a bot to watch X” posts are almost certainly 100% human-written
disclaimer: Security Engineer at Docker

It is VERY hard to do runtime detection of mining apps for two reasons:

1) it's mostly CPU usage intensive work and only if you know what's the average amount of computer power needed by your application upfront will you be able to make a policy decision on which image to stop and how to adjust Cgroups resources. If you don't, you'll have to build a reference profile of a trusted image anyway to be sure of what's the expected behavior.

2) There is no other "malicious" activity that might be reported by runtime security tools (it generally doesn't trigger anything blocked by your seccomp/LSM/filesystem-integrity profiles).

------- How to protect against this -------

The best protection is at the build chain level. There are tools out there to "bless" and/or verify an image's content/creator.
Notary and Docker Trust (higher-level abstraction based on Notary inside Docker) are two tools that allow you to do:

- key management

- signer management

- trust management

over Docker images.

It is crucial for people out there to make sure they only deploy trusted images and make decisions on what to run (CI or Prod) based on signature integrity of trusted images.

For a quick tutorial on Docker Trust and Notary, check this out: https://github.com/dockersamples/dcus-2018-hol/tree/master/s...

Stay safe and do not run unsigned/untrusted images!
What applications benefit the most from having this much RAM available?
How does it hook into the browser APIs? I can't seem to find it.
By what black magic would it know how to hook into my puppeteer instance?
Or I'm I not understand this?
No, probably not, but as with all security, electronic and otherwise, the goal is to make breaking the security cost more than whatever it's protecting is worth (for some arbitrary definitions of "cost" and "worth").
Cost's money to use commercially.
Kotlin 1.2.50 is out
You're totally missing my point(s). Of course web programming is tied to the browser, but why does that mean debugging via logs has to be tied to whatever particular console is attached to where a program is running? Why can't I have a console.table() equivalent in Python, and Ruby, and C, and Go, and Java that all can render via a common protocol to any viewer that can handle it?

By printf I didn't _literally_ mean printf -- I meant any logging type equivalent whether that IS printf or a built-in logging system. The point is there's no inter-op between them with any rich detail, which prohibits universal log viewers.

When I say travel over the network, I don't mean scp. I mean allow my iOS/Raspberry Pi/local Erlang server device to stream in real-time it's logs to any viewer that I want, whether that's on the same device or somewhere else in the world. That's the kind of portability required when you can't guarantee that complex display can be part of the same system that generated it -- that's a unique quality of web browsers. IT'S ABOUT THE PROTOCOL, NOT THE MECHANISM.

Text is great, and most logs will be in text. But I also sometimes want to inspect data, or expand JSON, or view an image, etc etc. But let's even stick with text -- a good viewer would let me set up filters on a host of structured qualities -- filenames, lines, log levels, keywords, etc. It would output in a way that allows me to easily view such info in a UI that supports infinite scroll back, easy copy/paste, elegantly formats so different log instances are clearly separate from each other, adds color to enhance readability, allows me to hide/collapse sections or duplicate entries, provides columns for the structured logging fields like timestamps, allow interactive sorting on these columns like Excel, etc etc all without losing my data.

Apple's Console.app is an elementary example of what I'm suggesting I'd like to see. Except I don't want it tied to the syslogs of an Apple device. I want every language/platform to be able to output to it in real-time. And for it's capabilities to be as rich or richer than what we have in the browser. We already have universal text editors like VIM/Emacs -- why can't we have universal log viewers?
> "offload various crypto routines"

This is a misconception. These crypto keys are only designed to protect RSA and ECC private key, and encrypt symmetric key instead of actual data, for good reasons. The actual symmetric encryption is still performed on the host computer, the actual AES key can still be stolen from a CPU side-channel.

Are these tokens any good? Yes, they guard your private key. Is it enough to protect you from Spectre? No.
As a developer, what's the best way for me to get sales experience?
You should try binding UP/DOWN to history-search-backward and history-search-forward[1]. Adding this to your ~/.inputrc

"\e[A": history-search-backward
"\e[B": history-search-forward

enables searching by the current line's prefix in all programs that use readline (a lot of languages use readline for their REPL). That is, if you type "cp<UP>" you immediately get the previous command that started with "cp", regardless of how far back it is in your history.

[1] https://codeinthehole.com/tips/the-most-important-command-li...
If the benefits exceed the costs, it’s hardly fair to argue that the program slows economic activity.
Have you ever worked with other major statistical packages? Have you ever caught people doing data munging in Excel? R fails far less silently than the credible alternatives. Source: I've been around the academic block and seen many types of horrors.

It's unfortunate that you've gotten to a _terrible_ feeling about R without realizing that many of the 'silent' failures are easily configured away (some examples, https://github.com/hadley/strict). That R isn't noisy about things that CS majors might think it should be by default is, BTW, entirely appropriate. Many of what one might call 'silent' failure modes in R are for the express purposes of making exploratory data analysis easier... and that was one of the original purposes for R.
>It isn't anything like that - they have leases over the next 10-15 years with a contract value of $18b.

Precisely. They have liabilities of $18b with no profits. In the event of revenue drying up, they are still on the hook for those leases. There is no real difference financially between a lease and a loan in that sense. If I lose my job and can't pay the rent, I don't get to just say to my landlord "Sorry, lease is up!", and move out. I can be sued for that entire value.
When you use tor it says not to maximize the window because sites can use your screen resolution to track you. More realisticly they could match operating system from the user agent with other data. I remember chrome being acused of putting serial number like strings in the user agent. Why would they not?
Yay! Congrats :-)
I don't disagree with King's thesis that a prolific writer can, of course, produce great works and many have done so, but I also can't shake the feeling that there is something special about authors who produce great works and then quit when they don't have anything else to say.

bad works don't diminish great works, but it feels like authors who only produce works of great quality and nothing else have a special feel for their craft, it seems like they are so confident in what they have to say that they'd be repulsed by just putting anything out that isn't remarkable, and that at least to me makes them special.

It's like comparing Daniel Day-Lewis and Jim Carrey. The former has taken on roles in remarkably few films, but pretty much every role is amazing and that's what's stuck in my mind when I see him in a film.

Carrey also has participated in films like the Truman show but then I'm also reminded of the Grinch and the Mask, which just ruins it for me a little bit.