skysight-inc/HackerNews huggingface dataset:
To be clearer, I would say that software is exactly as fast and secure as the market will bear.

There is probably an economics term I can cite to explain this better, like some kind of equilibrium (I appreciate any help explaining this).

But the sibling basically got it half-right -- software developers and designers are always making cost-benefit decisions.

The other half of it is that consumers tend to choose features rather than security. The are ALREADY faster and more secure alternatives to every piece of software you use -- you just don't use them because they don't have the features you want!

People vote with their feet, and what we end up with is not the fastest or most secure situation, because there are tradeoffs.

This applies to developers too -- not just end users. I mean why do people choose Python, PHP, or JavaScript? There are faster languages out there. There are languages that could help you write more secure applications.

But those languages have the features and library ecosystem we want, so we use them.

----

I'm one of those people who laments slow and insecure software. But doing my own open source project has kind of brought home the tradeoffs. I've been working for over 2 years on an open source Unix shell. It's written in Python [1], which is not exactly the right tool for the job. But if I wrote it in C or C++ or Rust, it would take 4 or 6 or 10 years.

So unforunately it is too slow, but there's a tradeoff between being slow and being fast but not existing and nobody using it. (Although I have a plan to fix it, basically outlined in that blog post. Not sure how much effort it will take, but I think less than rewriting from scratch.)

It's an economics problem -- if it doesn't have the features people already use, then they'll have to rewrite their software. Rewriting shell scripts costs a lot of money and it doesn't have a lot of advantages. It's more economical for one person/team to emulate bash in a new shell, than for the entire world to rewrite their scripts.

This recent blog post has the same sentiment buried in there:

https://apenwarr.ca/log/20180914

XHTML didn't succeed because it's more economical for a single browser vendor to make a really complicated parsing algorithm than it is for every single person in the world to change how they write HTML.

It's not like we don't KNOW how to design strict data formats, or we don't KNOW how to make secure software. (e.g. ask yourself why more people aren't using DJB's software.) It's matter of economics -- how much effort are the people making decisions willing to put in, and how much the market rewards them for it.

We can certainly improve the situation by valuing secure and fast software, and that has happened in the past. Windows used to be an utter disaster security-wise, but Microsoft realized that it was more than the market would bear, and they changed their whole attitude toward security.

Although if you want to be cynical, you can also say they made the "right" move to ship first and make things secure later :-(

[1] http://www.oilshell.org/blog/2018/03/04.html
Google seems intent on creating a more confusing UX in regards to EV certs as EV looks more similar to Non Secure than secure sites in Chrome 69.

For now this has given me the impetus to ditch Chrome. All of the other major desktop browsers still provide useful UI for EV certs. I’m less inclined to deal with finances on mobile through a website anyway, as every financial org I’ve had to deal with has an app, and Apple ends up being the gatekeeper in that realm.

Hopefully there will be some sort of push for useful additions to certificate security coming out of Google, as right now they seem more determined to just be undermining things.
> Just fix your schedule...

Clocks are standardized, which means there's a simple point of coordination for fixing them.

Schedules are...not.
It seems like hardware is moving away from RISC and even CISC architectures in favor of lots of different types of silicon for specialized applications (GPU, machine learning, vision, DSP, hashing, encryption, SIMD).

It makes sense from a hardware perspective but it seems software development is not keeping pace. General purpose languages have trouble targeting this kind of hardware.
The sunlight is the convention I follow.
Is excluding someone a hateful act?

It depends on how you do it. If it's of the same side, flying the same colors that wants to enact violence, then the other signifiers of hate can be read pretty reliably.
At my previous job we used itanium servers for the secure64 dns platform[1]. It performed well, the logic behind itanium is security not performance (according to secure64) but performance was never an issue. I do know the hardware support for rsa did give nice performance for dnssec signing.

[1] https://secure64.com/dns-products/secure64-platforms/secure-...
Are they being illegally discriminated against because of thier age or for valid reasons - they don’t have the skills the company needs going forward, their salary is higher than the company can get on the open market, etc.?
> Notice that stripe.ian.sh doesn't actually have an EV cert anymore: A system working as designed.

Comodo has apologized for incorrectly revoking the certificate for stripe.ian.sh and offered a new EV cert.

https://www.comodoca.com/en-us/about/blog/on-comodo-ca’s-rec...

In fact, many browser security developers would disagree with your assessment:

https://groups.google.com/forum/m/#!topic/mozilla.dev.securi...
This makes me want to boot up my PS2 which has an official Sony Linux install. Yep, they did that. They made a Redhat distrib that runs off of DVDs (with a bootable disc), hard disk, ethernet controller, and video that could connect to a monitor. Super fun. I'm not sure I ever accomplished much - you could program the EE, but not run any retail games. Still so neat though! I wish more platforms would have official linux support!
Wrote about that here

https://news.ycombinator.com/item?id=18011554
AOW :)
I always thought of Opera as the quintessential engineer's browser. I switched away from Chrome a couple years ago and haven't looked back since. It's fast, has tons of extensions and works well for pretty much everything.
Impossible to prove for any arbitrary program doesn't mean impossible to prove for programs that we actually care about, and it especially doesn't mean impossible to prove for a program where the programmer is intentionally trying to write a program where certain attributes are provable.

Any statically typed language necessarily has to prevent some well-formed programs from being represented. This language would just need to reject programs where it can't prove the attributes that it is suppose to prove in addition to programs that are actually malformed.

It is really ergonomics that prevents a language like this from taking off, not any theoretical concerns. Languages that let you prove a lot of complex properties at compile-time take too much work to use, but they are not impossible to create.
I'm a bit of a cheapskate, so I think a couple hundred a year for the family would be acceptable. That includes my parents, brothers, nephews, nieces -- I give out accounts under our domain to any blood relative with the same last name. Not a huge number, but it's like ~16 accounts. Only four or five that get any substantial traffic, but the rest are still perfectly valid individual accounts. At about $55/year/account for ProtonMail (if I looked in the right place; prices were in Euros), it pushes a thousand bucks a year. For email, that's simply more than I want to pay. I'd go back to hosting it myself on a Digital Ocean droplet before I'd spend that much on it. But ... I don't yearn to be in charge of security and tech support again ;-)
We have a number of hardware devices that are programmable via the serial port, and this API would be a nice way to provide that functionality directly via the web.

Most programming cables we use are USB to serial devices, which would suggest we could use WebUSB, but WebUSB only works for devices that haven't been claimed by the operating system, and it requires writing a Javascript driver for the serial chipset used by the cable (although there are a number of open source ones that could be used with some modifications, eg: https://github.com/tidepool-org/pl2303).

The detailed serial API specification is available at: https://wicg.github.io/serial/
I'd say betting any tech 10 years down the line is a fools game. in 2008, people were saying the same thing about object detection, or literally 100s of other things that deep learning has done that people said was impossible.

Autonomous cars are already safer on ice. being able to individually apply abs to each wheel in micro second speeds of detection of change in terrain is far more accurate than any human.

As far as snowfall, for the vast majority of places, hi def maps and semantic knowledge of signage already exists, so as long as the car can localize, it can obey snow covered signs, and google and others are already working on filtering out weather "noise".

The problem isn't as intractable as it seems
> The days of CC companies are numbered.

Some sibling comments echo that this is underway in Europe. In America, the credit part of "credit card" is relevant. Many purchases on CC's here are intended as short-term (or longer) loans. (Something like 40% of American credit card holders carry a balance.) Direct debit from a bank account does not (and cannot) fulfill this use case.
Custom TypeScript Lint Rules with TSQuery and TSLint
wouldnt it be true that, basically, every boom bust cycle is "caused" in part by 'traditional' investments having low returns which makes investors look for something with higher returns? which by definition is probably riskier?

the 'cheapness of capital' seems to me to be relative to the times that one lives in, in that the cheapness is only cheap in comparison to what investors believe they can profit from it.
> Imagine someone who has spent the last 25 years learning everything there is to know about SQL Databases. They aren't going to do very well in a lot of environments today with NoSQL

Baloney.
That site has Ireland's time zone wrong. It's actually GMT+1 with DST in the winter.

In computing, it actually matters.
I almost feel bad breaking this to you but, they (partially) have.

https://rendertoken.com/
I think what they're trying to say here is that they may be able to hide/block it, but they can't remove it outright. The same applies for most of their proxying services, they don't have access to modify the origin.
While blockchain definitely has it's use cases, it's surprising how much more effective a $5 DigitalOcean VPS with Postgres installed can be. At Vectordash we couldn't think of a single way in which involving a blockchain would result in a better product.
This is how IKEA designs its products.

At IKEA we design the price tag first and then develop the product to suit that price.
IKEA product developers and designers work directly with suppliers to ensure that creating the low prices starts on the factory floor.
They consider maximising production equipment, using raw materials efficiently and applying technical innovations and the best possible design.

https://www.ikea.com/ms/en_SG/about_ikea/the_ikea_way/our_bu...
I don't really care if it is legal or illegal. Appealing to authority is irrelevant to morality.
> The experience of weight, exemplified by heaviness and lightness, is metaphorically associated with concepts of seriousness and importance. This is exemplified in the idioms “thinking about weighty matters” and “gravity of the situation.”

How could an article like this seriously have gotten through peer review?
Interesting. Thanks for the link. How well does this addon work? Have you found the behavior and performance be pretty seamless between the two?
Reducing power due to high sea water temperature is something any power plan, regardless of fuel type, would have to do. The sea water isn't used to cool the reactor, it us used to condense the steam after leaving the turbine. If the cooling water is very warm adequate vacuum in the condenser is not possible to maintain. To alleviate this problem power is reduced to reduce the condensing load and maintain condenser vacuum. The linked article has factual misinformation in it which isn't unusual for technical pieces in newspapers.
No offence but seems like a complete ripoff of their homepage design: https://i.imgur.com/O1bGpvP.png
Chain printers like this were amazing to watch, the chain had to move amazingly fast and could break ... I worked with a Burroughs mainframe, we were always cautioned never to stand either side of the printer, because reputedly if the chain broke it could fly out the side and embed itself in the wall (never actually happened to us)

On some printers you could change chains for particular print jobs - when we printed some jobs we'd load up a chain with just digits on it (so the printer could print an entire line while the chain moved 10 locations rather than 48 locations - theoretically 5 times faster.

Page layout was done with a loop of paper tape N positions long (that matched the number of lines on a page) and 10 widem each one of 10 horizontal holes corresponded to one of the fortran carriage control commands "1" meant "skip until there's a hole in position 1 on the tape" - you'd change to a special loop when printing labels for example, or for different sized paper - if you made a loop and were stupid enough not to have a hole in each horizontal position at least once around a loop skipping to that position would result in a "page throw" fanfold paper would exit the printer horizontally until it hit the wall and would continue to do so until you ran out or someone noticed
Depleted uranium

I read that an awful lot of it was fired into Iraq by the US in the last 'war' there, and will be causing birth defects there for a long time. I don't think someone reading the calm sentence Depleted uranium is still used in military large-caliber bullets would have any idea of the horrifying reality.
The site is a snapshot of StackExchange data. If a new snapshot gets published, a new index would be generated and uploaded with it by the uploader.
Nah they eventually got me on a technicality. 3-day per week gig, but they kept pushing me into doing a 5-day week. I was the "innovation manager" funded by a government grant. So I was a one-man show expected to build, market and sell new profitable internal startups with zero resources or equity.

On a Friday I found out the largest startup conference in Sydney was happening the next week. So I let the boss know I'd be going to that. No response. I went to the conference. When I got back to work they fired me for "not giving 2 weeks leave notice" as was in my contract lol.

The story of how I got fired from the second job was even more sketchy. Involves the largest employer in the crypto industry. HR lied about giving me a warning about "behaviour" (never provided any evidence to the claim) and later admitted to having never contacted me. Small cartel of middle managers in a supposedly "decentralised company" fired me 2 weeks before a 6 month probation without any knowledge or consensus from my regional team or primary team. HR lady was fired 2 months later. They then strung me along for 2 months with a "soon to be proposed" rehire offer. Now they ignore my emails. Classy.
Not quite.. see my sibling response. It's probably more accurate to say that some people have thrown a lot of time and energy at the problem.

But the market does not value their software; we use slower and less secure alternatives.

Slack is a great example. There are probably 99 other chat services that perform better than Slack. (Apparently it makes fans spin on laptops, which is kind of shocking for a chat app.)

But the market doesn't necessarily care -- it values the features that Slack provides more.

Part of it is a bad network effect. I care about speed, but I might have to use Slack because the people I want to talk to on Slack don't care about speed.
Probably things similar to Automated Code transformations.
Eg:
http://www.semdesigns.com/Products/Services/LegacyMigration....

they site some numbers by Gartner (from '99, when 2K scare
was on everyone's mind)

"...

Cost of doing a manual migration:The Gartner Group notes that the cost for manual code conversion can range from $6 - $26 per LOC and is accomplished at a rate of 160 LOC per day (Gartner Group study "Forecasting the Worldwide IT Services Industry: 1999,1").

An assumption is that the migration is going between two relatively similar languages (e.g., not trying to go from COBOL to full object-oriented Java). Using Gartner's numbers, a million lines of code costs $6-$26 million to migrate.

Time to do a manual migration: Again, using Gartner's numbers, a legacy system with a million lines of code requires some 28+ man-years of labor to convert. With a team of 10, this takes 3 elapsed years if done well. With larger systems, one has larger teams. Larger teams require more interactions, slowing them down further.

A 10 million line application simply doesn't have any practical manual migration due to time frames.

"

Never used their services.

But I do think this will continue to be difficult, yet
beneficial option, for the migrations from legacy/less secure software.
Are you in the US? Because interchange fees (which are the same whether you are Walmart or a hair salon) average about 2%.

Unless stripe is processing mostly generic debit cards, then they are most certainly not pocketing that full 3%.

I would guess that the makeup of stripe customers is similar to the US average, so they are probably paying close to 2% and then pocketing the 0.9% plus most of the 30 cents per transaction.
> Well, if you hand-count a voting machine, and it gives you a different result from the machine, then you know something went wrong.

And you'll probably have to ask someone who's not in the room about what went wrong. With human hand-counts, the person you need to ask is already sitting there. No mystery, no confusion.
Lego designer combines Nintendo Labo form with Lego functionality
Software companies are lazy in exactly the same way that the entire rest of the economy is lazy. Companies in every industry try to cut costs as much as they can.
VCs run funds and need a decent return consulting biz generally does not fit the ticket for them. If you intend to run a consulting shop you def. do not want VC money. (Unless you can spin and market like Palantir than you can easily position a consulting outfit as high grow tech company)
A DMT trip 'feels like dying' – and scientists now agree
Ask HN: Is the Linux Kernel “Code of Conflict” Really a Bad Thing?
A few days ago the Linux Kernel "Code of Conflict" was removed from the source tree and replaced with a "Code of Conduct": https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8a104f8b5867c682d994ffa7a74093c54469c11f . Linus officially apologized for his behavior towards some contributors: https://lkml.org/lkml/2018/9/16/167 . Despite the provoking title of the former actually a kind of "Code of Conduct", I find nothing inappropriate in its text. Furthermore I find it even more valuable, because "Тhe Мain Value", which it proclaims is the quality of the end product. I don't think that people have to have some kind of unacceptable behavior towards each other like those mentioned in the new "Code of Conduct", but is it really better to replace "The Quality" with a kind behavior?

History knows many great people who excel in their field, but who are also famous with that they are not the kindest person you can know. Sir Isaac Newton, Thomas Edison and Linus Torvalds himself to name a few. Such characters are also common in literature and movies like Sherlock Holmes and Gregory House for example. Despite their sometimes harsh behavior towards others not so good as them, in general this people are admirable because of their inimitable contribution to the society. I think that one thing that all of them have in common is that the quality of their work is in the first place for them, and this is one of the premises for their success.

Isn't it changing the focus of the "Code of Conduct/Conflict" from "strive for perfection" to "be a kind person" potentially damaging for the entire community no matter of the concrete project? Here I'm talking in a wider context, and not only for the case with Linus and the Linux Kernel.
Many analyses have been performed and the only thing they have agreed on is that the difference, whether more savings or extra waste, is miniscule: less than 1%
They thought I would be just another brazilian and join their corporate corruption scheme against a major hospital here in southern brazil.

The main guy, a PhD in Physics from a top university in europe (but a retard IRL), will be cleaning sewers until death comes.

True story.

edit: i was the founder and they were clients in a bootstrapping program involving a top 10 tech giant and a hospital
I've always been curious what "skills" need to be practiced to drive in the snow. It isn't overly technical. Just don't accelerate or brake too fast and dont turn while you are doing either. If you feel the car start to wobble or fishtail a little, it means you are going too fast.

Thats literally all I change, and I have done fine all my life
Lack of leadership, we had a general idea of what we wanted but it was never defined. We wanted Shopify, years before they came along, 2001. But we never defined the product because no one took leadership of the product and business.

Bad programming, (me) had just finished college and thought I could lead a team of programmers because I had done an ok prototype that was actually working at a small scale. Given that specs were being defined on the fly then the programming was a mess. To scale it, we brought in programmers hoping it would help but they mostly sat around because we didn't know what we were building. Also, we got subpar programmers because they were cheap. One guy managed to BS his way into a paycheck for 5 months without ever programming a line of code. After he was fired, I found out that that was his specialty, getting hired and getting fired a few months later.

We could not meet deadlines, we could not meet self-defined deadlines so the investor's money stopped.

A lot of useless infighting due to egos, we could not figure out the business but we sure found ways to fight and argue.

I wish we would have been more willing to learn as opposed to being so arrogant by thinking we knew everything. I use it as a warning every time I think I know everything and it brings me back to reality. We lasted 2.5 years. We should have closed shop at 3 months.
Its a very interesting subject, and depends how far down you want to go before you are satisfied with an answer.

Both victimization and offending rates for murder were 3-4x the rate for blacks than whites in 1980 for example. Why was that? Could it be factors like systematic racism, redlining, bundling a lot of poor people into housing projects, brain drain in cities (due to redlining post-integration)?

The result of "tough on crime" has been incarceration rates exploding. They just throw anyone in jail. 5% of black adults are in jail.

https://en.wikipedia.org/wiki/United_States_incarceration_ra...

You would think that since the crime rates are down, the incarceration rate would be going down - how can incarceration rates go up as crime goes down? Technology and standard of living increases for the poorest has probably helped crime. The mass incarcerations just help for-profit prisons.
> It screws third party logins and integration

Sounds like a feature to me.
Nature and Science are excellent starting points.
For the whole domain it would basically amount to a new iPhone every year. A pittance, I agree, you make a valid point.