skysight-inc/HackerNews huggingface dataset:
No. While dependent types or something like Idris is strongest form of correctness the technology just isn't mainstream enough yet. This is not what I'm talking about.

It's really too long to get into but the programming methodology I'm talking about has to do with reducing complexity of your program to the point where your intuition along with the type checker should render unit tests mostly redundant.

For example a language with no nulls renders all unit tests that test for null runtime errors unnecessary. Add exhaustive pattern matching into the mix and you'll render All tests that cover runtime errors unnecessary because your program simply can't have a single runtime error (see elm.)

Both of the examples above involve either the language itself or a programming methodology or both. Rust and Haskell are two languages that force a lot of "methodology" onto your programming where a significant amount of unit tests that you would otherwise need in say python or C++ are rendered unnecessary.

Another way to look at it is using a highly restrictive form of programming. The more restrictive the less opportunity for errors to the point where your intuition and type checker alone should be able to allow you to forego unit tests.

There's more too it like segregating all IO from core logic but I've already written too much. Suffice to say what I'm talking about falls within a subset of the domain of a semi-popular style of programming. I don't bring up the name because that will only detract me from the main point.
I'm always curious when this comes up: which libraries in particular do you have in mind? If you love Lisp and they're really absent, a short list would at least provide a data point for something that would be desirable and ambitious newcomers could cut their teeth on.

Anyway I don't think the library ecosystem is so dire... Lots of good libraries are distributed through quicklisp. It's pretty straightforward to wrap a C library. (You can even do C++ easily if you switch CL implementations to Clasp...) If you need Java libraries, you can switch CL implementations again and use ABCL. (But of course all your CL code and CL libraries still work.) Lastly, for Python there's https://github.com/pinterface/burgled-batteries (and https://github.com/snmsts/burgled-batteries3 for py3) that even in an incomplete state might suit your particular library needs.

Perhaps this capability isn't very compelling since Python can also access C without trouble (and Java via Jython, .NET via IronPython)? Well I guess all I have left to ask is whether you've considered there might be libraries (or features) in Lisp that would be needed that don't have equivalents in Python? What do you do then? One possible library for admittedly niche applications that came to mind was a hierarchical task planner (https://github.com/shop-planner/shop3) but I forgot someone did indeed make a Python library (https://github.com/oubiwann/pyhop) based on an older version (SHOP1) of the background work, so depending on if you need the v3 features it might suffice.
> The author of the post also calls out that the mistake was his, despite the occasional muttering about "dark UI patterns."

Yeah I saw that like, and lolled. The author does indeed admits his/her mistakes, but proceeds to kinda blame it on AWS anyway.

It's like like saying "look I am no racist but <insert some very bad racist phrase here>".
Or people getting offended by GIMP.
The pedestrian phrasing is in service of communicating an idea simply. The text you quoted is building to a point:

"Useful writing tells people something true and important that they didn't already know, and tells them as unequivocally as possible."

Plainly stated; thought-provoking and useful as a tool for assessing prose.

I am more inclined to read essays with PG's name attached, but that's because they reliably provide an interesting perspective on their subject matter.
How our QA team leverages Gitlab’s performance testing tool
I use a homegrown solution consisting of Raspberry Pi Zero W's with cameras, using the motion (https://motion-project.github.io/) daemon, saving their captured video to a NFSv4 share on a server.

The shares on the server are grouped so that each individual camera has a subdirectory of a parent directory, which is in turn shared by Syncthing to another local mirror and a remote mirror.

A python script runs on the server, using Pyinotify to detect new files, and using TensorFlow to do basic object detection, and adds bounding boxes to videos where it detects humans.

Finally a notification is sent through Pushover via MQTT (Mosquitto) when a person is detected, along with an image and a camera name and timestamp. It does presence detection by pinging our phones, so notifications are only sent if nobody is home.

If i should do it all again i would probably just buy a couple of Unifi cameras and a Cloudkey Gen 2 Plus and be done with it :)
To get good, go after the metagame
If you want to access RESTful APIs via OCaml, you may consider using OpenAPI Generator to generate the OCaml client automatically instead of manually creating one. Here are 3 simple steps to do so:

1. Download the OpenAPI Generator CLI Java JAR (https://repo1.maven.org/maven2/org/openapitools/openapi-gene...)

2. Rename the JAR as "openapi-generator-cli.jar"

3. Run the following command to generate an OCaml API client for the Petstore API (https://raw.githubusercontent.com/OpenAPITools/openapi-gener...):

Mac/Linux:

$ java -jar openapi-generator-cli.jar generate -g ocaml -i https://raw.githubusercontent.com/OpenAPITools/openapi-gener... -o /var/tmp/ocaml/

Windows:

$ java -jar openapi-generator-cli.jar generate -g ocaml -i https://raw.githubusercontent.com/OpenAPITools/openapi-gener... -o C:\tmp\ocaml

If you've any feedback or question, please let us know via https://github.com/OpenAPITools/openapi-generator/issues/new
I do know that the website hosts lots of illegal content. That said, I also know that many people use it just because it's so much more convenient, and who do are allowed to access the material: either because it's already Open Access, or because they're at an institution that has a subscription. See [0]:

> Some critics of Sci-Hub have complained that many users can access the same papers through their libraries but turn to Sci-Hub instead—for convenience rather than necessity. The data provide some support for that claim.

Note also that the article you linked spoke about linking directly to photo's and articles, not to websites that host both infringing and non-infringing content. I presume Wikipedia wouldn't do that either, even though they do link to the homepage.

(And fun fact: some articles published by Elsevier actually do link to Sci-Hub versions of articles. Not really relevant to this, but still funny.)

[0] https://www.sciencemag.org/news/2016/04/whos-downloading-pir...
Does Grandma have a small WiFi router that her cable modem is plugged into? Well that device provides local DNS for her.
although it might the facto be, at least for AMD64, I wouldn't say it is the official standard ABI of all unix systems. But it is the standard ABI of Linux based systems, at least those that claim to conform to the LSB.
I run it on a Raspberry Pi 4. No camera is directly connected to it. All cameras are WiFi based and it records 10 streams of 720p/15fps over RTSP.

motionEye can also be used directly on Raspberry Pi Zero along with the Raspberry Pi Camera but I don't use that setup as getting night vision to work on it a hassle and expensive, comparatively. It works though :).
Effective B2B Advertising Techniques to Promote Your Brand Offline
The UK announces a new points-based immig­ra­tion system. Here’s what to expect
Yes, it supports custom resolvers, see the section "Switching Providers": https://support.mozilla.org/en-US/kb/firefox-dns-over-https
I posted all comments above; there were no details about takedowns. I think it's an automated message.
Securing Firefox with WebAssembly
There is an HN thread from a week ago when the trailer debuted:

https://news.ycombinator.com/item?id=22347911

Lots of commentary.
From the article:

“We reported this in February 2019 to PayPal via HackerOne,” they say. “After an initial rejection and several discussions, PayPal paid a bug bounty of $4,400.” The pair have not heard from PayPal, they say, since April 2019. But this week “tried and could still use the virtual credit card for online payments.” That means, they told me, “the bug has not been fixed.”

To reiterate the OP, what is the point of a bug bounty program that ignores or fails to address reported issues?

> The two stories are unrelated

They are related in the sense that both stories show a failure to respond to reported issues.

> Note that here, Paypal paid a substantial bounty a year ago.

They paid but didn’t fix the issue? This is not taking account security serious at all.

At best, PayPal has a critical flaw in their bug bounty program.
> It's amazing how much this misses the point of the conversation on meritocracy - that critics of meritocracy do not have a problem with merit itself, but rather (1) how merit can be measured in more abstract ways, (2) the degree to which meritocracy can exist with current social relations, (3) the degree to which meritocracy really does exist, with respect to claims that it does (in a just-world hypothesis kind of way). A similar problem was pointed out in the comments[2]. And yet... in support of the position Scott is attacking, he cites one recent pop-phil book, and two blog posts. Where are the published journals? Where are the essays? What have domain experts (i.e. philosophers, political theorists, economists, and sociologists) said about meritocracy? Who knows.

There's plenty of criticism of "merit itself". What is "from each according to his ability, to each according to his needs" if not a criticism of merit?

Have you ever read Eros and Civilization? Herbert Marcuse identifies the "performance principle" as the concept underlying capitalism. Per Marcuse, our reality principle is the performance principle, which can be summarized as "to each according to his ability". Marcuse argues that this was necessary in times of scarcity but now, in 1955, we have solved the problem of scarcity and the performance principle is obsolete. It's hard to identify more relevant leftist writings in the 50s-70s than Eros and Civilization and One Dimensional Man. They're definitely criticizing merit, or at least that merit should be rewarded (which is the definition of meritocracy).

It's quite refreshing to read Marcuse today because, unlike today's leftists, he's not afraid to admit that (1) capitalism was necessary to get this far and (2) to attack the idea of rewarding people based on their performance head-on. I think he's completely wrong but at least you can figure out what he's saying.
> No, I'm sorry you got that impression.

Ok, Fair enough :)
Unfortunately we can't control what other people do; everyone does what they are driven to do / what they find valuable. (We can at most create the environment and incentives that will influence them strongly, if their own intrinsic drives / values aren't pulling them strongly enough in some direction. But what incentives could sway a tenured Stanford professor who already had a Turing award and was certain what his life's work was?)

What Knuth seems to enjoy are ideas, and teaching/exposition. That might explain why his "literate programming" is structured around the metaphor of writing, rather than that of, say, engineering, architecture, or tool-making. In this case, he has written an “essay” around a certain data structure that we may call a hash-packed trie, a small twist (possibly never done before!) on the packed tries that had been described in his student Frank Liang's thesis and used for hyphenation in the TeX program.

This data structure is uniquely suited to this problem of going through a file and counting words. It cannot be obtained by putting together "reusable blocks". (At most it can itself be packaged as a library, but would probably be used only for word-counting, which is the original problem itself.) So I would disagree with your "key takeaway" IMO. What you (and McIlroy) are describing is a different approach where one does not try to arrange for a problem to be solved using the data structures and algorithms best suited for it, but tries to express the problem in terms of existing “blocks” even at some cost of efficiency or other considerations. This is a perfectly fine philosophy on its own (see the quote above about "prefabricated house"), but it's not the full story here.
> The software can detect people but it can’t really be used for thermal screening because it needs to be tuned to the correct temperature to screen.

Plus the slight issue of having a sensor with a precision of +/-2.5C...
The randomness in games currently available boils down to picking from a set of very large numbers and executing a limited number of code paths. That is to say, there are no non-deterministic video games, because all outcomes must be programmed.

A problem that can crop up with emulators is a lack of random seed values between runs, leading to, for example, a dungeon crawler with the same loot every time.
I missed that ellipsis cue, thanks for pointing it out. The complete excerpt is not in the complete paper though, but it's probably in their released data.
Auto-completing e-mail adresses is a GDPR violation? Because you could iterate them and see all the contacts? Seriously?
> does nothing that you can’t do in software

I can't turn knobs on my computer, and the blinking LEDs are underwhelming.
After many years with old X and T Thinkpads i got a Dell Latitude at work and i'm pretty happy with it. Everything works well, including the thunderbolt dock. Even the keyboard is pretty decent, just the trackpoint (they call it a "pointing stick") sucks, nobody except IBM/Lenovo seems to get it right.
I don’t think it’s necessarily waste. It’s cost of living. If city employees need to make 6 figures just to be able to afford living in the city, of courses taxes will be higher to compensate. High taxes with zero improvement in services.
Stripe: How the $35B Payments Company Plans to Supercharge Online Retail
As someone who’s project was vendored into Fuchsia, I will say that there were a number of contributions that were made directly to the project to support its use in Fuchsia.

This means that while the overall project is used outside of Fuchsia, google is contributing upstream patches, to many of those projects specifically to support Fuchsia. At that point it’s not a clean separation of what’s “in house” vs. not.
Swedish license plates (currently in the form of "ABC 12E" are screened for 3-letter combos like "CIA", "KGB", "KKK" and of course "KUK". Such plates are not issued.
The Markup Started Publishing
Sure, but the names are real.
The Linux processor-specific ABIs explicitly call out that the Itanium ABI is the C++ ABI for x86 and x86-64; ARM has its own ABI that differs from the Itanium ABI only in the exception handling details.
I run linux on a P1 (2nd gen) and I know people who run it on the X1 Carbon.

The linux experience with the P1 has improved quite a bit since I got it about 8 months ago as support for the hardware has improved in the kernel.

Generally, I would say ThinkPads support linux as well as anything else right now: the ultrabooks with Intel graphics are fine. Anything with optimus graphics chip will work but not quite perfectly. Imho stay away from OLED for now.

Ubuntu 20.04 will bring fractional scaling and a new kernel. Along with packaging the nvidia drivers on the ISO and the optimus support they've built in, that is probably going to be the best laptop distro.
Anybody have any stats on what percentage of websites and or percentage of global web-traffic hits websites that are hosted on their own personal unshared IP, vs those that are hosted on shared IPs?

Because if 90% of websites are hosted on unshared IPs, then this whole thing about DoH and/or ESNI providing some sort of privacy is complete bunk. An ISP can still see exactly what website you're visiting when connecting to an unshared IP by virtue of which IP you're connecting to. The methods for mapping a raw IP to a website when that IP is unshared, are numerous and effective.

DoH/ESNI only provide privacy if the vast majority of websites are on shared IPs.

DoH/ESNI only provides privacy if we have already (or are planning to) centralise web traffic behind a handful of gatekeepers.
Does it submit every FQDN via DoH? So does Cloudflare see myspookybox.zeveb? Because if so then even that is an information leak.
> “We reported this in February 2019 to PayPal via HackerOne,” they say. “After an initial rejection and several discussions, PayPal paid a bug bounty of $4,400.” The pair have not heard from PayPal, they say, since April 2019. But this week “tried and could still use the virtual credit card for online payments.” That means, they told me, “the bug has not been fixed.”

> But in terms of the Fenske and Mayer disclosure, the researchers told me that this is not fixed, even after PayPal’s “mitigation” statement.

If Paypal has known about it for a year and it still isn't fixed, then it means that either 1. Paypal didn't understand the bug report and "fixed" something else 2. Paypal understood the bug report, didn't fix it, and is trying to save face. Either one of those sounds pretty bad for their security policy...
Spotify aligned CDN services for a lightning fast streaming experience
The author of AutoSpotting here, this is often being asked and I'm happy to clarify it.

The mixed capacity ASGs currently run at decreased capacity when failing to launch spot instances. AutoSpotting will automatically failover to on-demand capacity when spot capacity is lost and back to spot once it can launch it again.

Another useful feature is that it most often requires no configuration of older on-demand ASGs, because it can just take them over and replace their nodes with compatible spot instances.

This makes it very popular for people who run legacy infrastructure that can't be tampered with for whatever reasons, as well as for large-scale rollouts on hundreds of accounts. Someone recently deployed it on infrastructure still running on EC2 Classic started in 2008 or so that wasn't touched for years.

Another large company deployed it with the default opt-in configuration against hundreds of AWS accounts owned by as many teams, many with legacy instances running for years. It would normally take them years to coordinate as a mass migration but it just took them a couple of months to migrate to spot. The teams could opt-in and try it out on their application or opt-out known sensitive workloads. A few weeks later then they centrally switched the configuration to opt-out mode, converting most of their infrastructure to spot literally overnight and saving lots of money with very little configuration effort and very few disruption to the teams.

If you want to learn more about it have a look at our FAQ at https://autospotting.org/faq/index.html

It's also the most prominent open source tool in this space. Most competition consists of closed-source, commercial (and often quite expensive) tools so if you're currently having any issues or missing functionality, anyone skilled enough can submit a fix or improvement pull request.
> If your "security controls" depend upon other people volunteering to use some protocol then those weren't "security controls" they were more like "guidelines".

It's not about volunteering. Previously I could block udp/53 and tcp/53 and be confident of the fact that no DNS look ups would happen. (DNS queries over other ports could be caught doing packet sniffing.)

Now I have to worry about DNS queries going out via HTTPS. So if I want to monitor my network for malware contacting a C&C server I have to snoop HTTPS. Which means I now have to install a web proxy and perhaps do MITM.

Previously I could 'simply' monitor DNS look ups to see if anything was trying to connect to nefarious domains.

DoH has reduced visibility into my own network.
Rapidly build a GUI for your Python Script in the cloud – beta
If I hire an employee I am constrained by employee-employer regs. Those can sometimes be onerous, and the remote thing adds a few wrinkles -- are you liable in your state/province/department, or theirs?

But you also have the power, and it's far easier to plug them into your existing work structure.

Hiring a small team is effectively outsourcing a component or subsystem to a foreign coding company, the laws change -- B2B contract vs hiring -- and there are communications and workflows to deal with.
Here you go https://archive.ph/vpS31
I cannot tell if you are being sarcastic or not, but here in the US almost ever ATM that isn't at YOUR bank will charge a $2-$5 fee for withdrawal and then the bank will hit you with another $2-$5 fee. So depending on your bank, if you want $20, it could cost you $10.

OR (story time) if you are like me, and you end up needing cash in rural Oklahoma to pay an upcoming cash-only toll, and you pull off at the ONLY gas station between you and the toll, you could get hit with a $20 fee to pull out $20 (because its a freaking casino).

That said, there are many online-only banks that are part of ATM groups that have 100k free atms at various places all over. I use them.

And when traveling abroad, oddly enough the best cash card I've ever had is a CapitalOne debit card. I only use it when traveling, but no FX fees, and no ATM fees. So in the UK, most of the major banks and grocery chains have free ATMs, so I get free access to my money even abroad.
It is also obvious that the parent poster apparently assumes that they have seen problems that no fp developer has seen ever.

Functional languages have been around in production for decades now. They have met and adapted to pretty much all the real-worldliness and messiness and pragmaticness you can think of. And these days, the concepts they came up with are being massively adapted to enterprise darlings such as java or c#.

Could we get more consideration than the old "You don't know real world"?
Parent comment meant transfer crypto in or out.
> However, also in practice the faction in power gets to capriciously enforce what it wants selectively, usually to solidify standing.

aka as "the rule of law".

From a continental European perspective, the US stance in rule of law seems a bit dubious as well, with the president pardoning his friends, or the enormous sentences afflicted to people once, but only once, they end up in bad public standing, or elected states attorneys incentivize to look hard on crime to their constituents.
This is an unfair expectation. Glimpse has taken off in my school however.
You could say the same about Transferwise. Revolut is setting themselves up as a bank for millenials/gen Z. It is light years ahead of traditional banks in terms of user experience. Banks are a proven way of making money.
It’s because they’re so expensive. Luckily though, behringer recently announced a bunch of amazing modules for very cheap (which is basically their MO, and why they are going to end up eating most of the industry)
Two I liked a lot were 'get lamp' about adventure/infocom folks, and ... I can't remember the other name, but it was a documentary about Commodore.

Agreed - there's probably loads of interesting documentaries that could be made with people still alive. A movie on game consoles of the 60s and 70s would be great, imo. And there's probably some out there I don't know about.
is this only on desktop ? i cant find this setting on android
If you need a few servers, then yeah, AWS is super pricey and locked in.

If you need 50 engineers to be able to manage 200ish servers, well, uh, you just don't have a ton of options.

Obviously not everyone falls into that second category but plenty do.