skysight-inc/HackerNews huggingface dataset:
If 96% of the installed base gets this patched more or less immediately, the situation is endlessly better than a similar situation would be for Android, given most manufacturers and operators' lack of interest in providing software updates.
Yea and that's a helluva lot closer to what FB should have paid for it.
Because interpreting an unknown language equals describing how you made something physically impossible, right?
This is what a lot of it is about, balance. When we write open source software, we don't usually have costs, time isn't a factor, we aren't being rushed by a long todo list, so we can invest in the code. In business, we don't always have this luxury.
So google failed to catch the social bus, who gives a fuck. Google is an engineering company at it's core, and as long as they continue to do ridiculously cool and useful R&D with their search advertising revenues in the hopes of developing new killer products. They are a far more impressive and valuable company than their derpy cousins at facebook who mostly just capitalize on people's vanity and boredom.
While I dislike programming in PHP (the syntax is ugly mostly), and I like Python and JS, I don't think getting away from PHP is a solution and the solution. PHP is not the problem in this situation. It's the people who is working there with OP.
I think this analysis is inaccurate.

The thing about Facebook advertising, and the reason it struggles with monetization, is Facebook knows nothing of what people want. Moreover, there's a ton of stuff people will never post about wanting to Facebook (privacy is a big issue there - from friends and family).

The best Facebook can do is classify people into narrower demographic bands, but then spam the range of advertising for that band at them. It is not good at it - I'm under-30, ergo clearly I should be sent ads for alcohol and travel. Regardless of time of day or what I'm doing at the moment.

Facebook can also never not show you ads - they don't know intent, at the moment, so they have to try and catch the rare sellable moments throughout the day of a person, whereas Google knows when you search that you're searching for that exact thing right now. Which means they can filter a lot of ads which would otherwise make people suspicious of the advertising because they don't have to show you anything when they have nothing interesting to show you.

Moreover, the type of advertising you suggest Facebook leverage is a giant catastrof* of possible legal issues with using people's likeness without permission. To what level of social graph depth are they going to do that? And who bears responsibility if 4 months after saying "I love GEICO" someone follows up with "Screw GEICO, they're a terrible company to make a claim with". Facebook doesn't get paid for not showing the GEICO ad anyway.
How come? It seems clear they are in different timezones. The colors represent the difference between local solar time and local standard time.
> I always prioritize security as number 1.

> I've made sure that my code was secure

> has just always been embedded into my programming philosophy

> So their environment was broken to me.

> I've began to realize that I'm a much better programmer than all of them

Good code quality, and security, is something everyone needs a bit more of, but be careful not to fall into dogmatic thinking. They are paying you to do tasks the way they want them done. If you can show them a "better"[1] way they might take your advice, but you should never expect it. Programming is more than just a job skill to me, so I always have to remind myself about the line between "my code", built on my own time, and "their code" for which I am being paid to build/maintain.[2]

> I showed them OSWAP, and they have never heard of it.

> I mentioned MVC pattern, and the manager didn't know what that was.

This is common. Never hearing of something is not bad. No one can keep track of all the tools available, learn them well enough to use them, and still accomplish what they need to do. No matter how much time you spend trying to keep up, you won't.

Also, your coworkers, and manager, might already know what will and won't be approved. So, they are only informing themselves of things that are likely to be important to their tasks.

> I've began wondering if all work environments are like this.

No comment.

[1] There are many definitions of better. (Time, money, complexity, maintenance, ROI, etc.)

[2] Some managers / employers want you to mix the two concepts, but, in my experience, this is just encouragement to focus more attention on the tasks they are giving you. You need to draw a line.
What did subsequent generations of equipment use?
That out of the 300+ plants described about 12% could match some existing ones doesn't really allow anyone to make definitive conclusion as to whether these plants could be real. I'm sure you could match some of the simple ones to more than one plant and that still 85%+ that are unaccounted for.

Beside, that doesn't detract from the fact that the author of the manuscript could still have found inspiration into existing plants, imagination doesn't preclude a basis in reality.

Maybe the manuscript was written in Mexico. Maybe it is written in a cypher to obfuscate the fact that some of its content might be believed to be heretical (it contains a fair amount of naked women and appears to have some diagrams and illustrations that may relate to a theory of the origins of life or an animistic explanation of natural phenomena).

In an case, it's certainly an interesting subject of research, but I still think that the possibility of it being a work of pure fiction, maybe for the sole amusement of an eccentric rich patron, is a possibility.
Isn't that overkill though? It's not like they're practically (as opposed to theoritically) better than 16 char passwords.

Who can force break 16 char passwords (especially with non-alphanumeric chars in)?
Have you seen this: https://www.bountysource.com/fundraisers/539-neovim-first-it... ?
That is very similar to my first job. The truth is that most programmers are not very good at writing software. Some don't care about code quality, and others haven't learnt (yet) how to program well.

When you apply for your next job be careful to ask about their coding practices. Ideally you should be able to find their lead devs on github or somesuch and view their code to get a sense of how good their work is.
Currently on an offline machine I cannot use VS 2013, I get a modal with the only option being "Exit Visual Studio".
Last time I used VS was 22/12/2013.
This is really fucked IMHO.
That is part of life though, and as frustrating as it is, you'll sometimes have to expect that other people will rework your code.
I, for one, it's 90% about the syntax.
Java is used a lot in web dev. See servlets and J2EE. It can feel a bit enterprisey though.

Scala and Clojure are relatively new languages but they have pretty good web frameworks, which tend to be closer to RoR than the J2EE stuff.

C/C++ is indeed used very rarely - it's just too dangerous and unwieldy.
What features does an IDE give you?
Express or Pro?
We often criticize companies for being blind-sided by an innovator coming up behind (ie. Microsoft with the web), but in this case I think we have the opposite problem of Google dropping everything to try to become Facebook.

Your reasoning about the potential threat of Facebook is of course totally cogent, and indeed Facebook could be a threat to Google's business. The only problem is that they haven't proven there's a way to monetize that word-of-mouth that Facebook technologizes so well (because of course it's always existed). In fact there's a strong argument to be made that it is impossible to monetize this phenomenon without destroying it. Facebook is throwing everything they have at this problem, but they have still not crossed the chasm. The state of play today is that AdWords are expensive because of the ROI they can drive, and Facebook tend to be cheap, yet still overpriced due to a wave of hype that has crested but still hasn't washed away back to sanity yet. And when the smoke clears will Facebook's model be more valuable than Google's? I think that's anything but a foregone conclusion.

Given the uncertainty of the winning model, I'd rather see Google stay true to their DNA rather than chase after the Facebook hype with the G+ strategy. Some good has come out of it in terms of improving their authentication across properties, but by and large it appears as an impotent move to recreate a second-class implementation of Facebook that no one gives a shit about. Meanwhile, Google actually has tons of properties that Facebook can't touch. So why are they chasing after an upstart? I consider it a sign of weakness and ultimately detrimental to try to shift your company culture like this. If you're on top with a certain strategy, do your best to ride that wave instead of running scared and trying to compete with someone else on their terms. It's a sign of weakness, and only should be pursued when the company is in real trouble, not based on attempted clairvoyance.
Here's a little bit of a conspiracy theory for you. There's an old saying: "there are no coincidences on Wall Street". Not with the amounts of money that are involved.

I think something similar should apply to critical security code. This reminds me of when someone tried to add the following to the Linux kernel:

if ((options == (__WCLONE|__WALL)) && (current->uid = 0))
retval = -EINVAL;

Oops, is that "uid == 0", or is that "uid = 0"? Yet another "typo" that couldn't happen in Python.
Thinking about 'us' is definitely the best thing to do and it is definitely a failing of (some) young but talented programmers to develop a certain arrogance which only puts others off.

However, at some point it will become obvious that you can/can't effect change in a meaningful timeframe. And if the latter, you should move on.

The sad truth is that often the bad type of programmers the author describes are unwilling to learn, and are especially reluctant to take lessons from a new/young colleague.
Which they acquired in 2006 (less than 20 months after YouTube launched). They've been driving YouTube for quite some time now.
Err, by his classification, Smalltalk is also in the C, Ruby, Go bin.

He divided by Algol-like syntax and heritage, not by mere popularity.
It is, but it's definitely not a good way to treat new people to the team, especially people on their first job.

Much better to explain the bug/problem and let them fix it.
Down with Creepware! Down With Creeps!
I've seen pictures of animals that were described to an illustrator. They're pretty far from the actual animal. Is that possible here?

I imagine drawing a plant from a dry mangled sample is going to be tricky.
There is always politics in any workplace, any organization.

My first thought is to have meetings where you and your team make a list of problems that you guys are facing (is logging not enough? is disk filling up quickly? is it getting hard to maintain some part of the code, etc). Don't go overboard. People who are much more senior than you are in this organization have pride. Imagine you worked your way up and did most of the coding and suddenly a new hire called your code shitty and ugly and non-functional, that hurt. Also, some people fear of breaking system. School in particular hates it. They don't care; students don't care. If school's portal is down for more than 1 hour, someone is gonna get an ugly call from some executive admin.

I can say testing, MVC patterns, all that shit (excuse my french here, in your manager's hypothetical voice) are least priority. What are your priority. Prove SQLi. Then fix it. Are there documentations for how to set up a server running the software you guys are working on? Is it done with a shell script. If so, is it working?

Testing and new development patterns shouldn't be your priority. They are cultural. You can't build Rome in one day unless you have all the people behind your back.

Scrum style, sure, but do it slowly. Also, this may sound extreme, but sometimes, you need to play a bit dumb. Don't show off. Some people can't face the fact they are out of the league... sometimes playing dumb/doing things a little slow can make things smoother.
Small webshops are also rife with this kind of programming environment. Mostly because their clients have no idea about code quality and the projects are small enough that you can still just about be productive with terrible programming standards.
That correlation is exactly my experience.

What are examples of companies that have a verifiable 'great software' culture and chose PHP because they prefer the language?
Entourage Cutouts: The 4 Most Visually Effective Types
>Someone that lived in my building believed in some aspects of conspiracy theories. For example, he believed that Facebook was backed by the CIA.

Facebook really was backed by the CIA though (through one of its investment arms)

https://www.youtube.com/watch?v=DIGdWsxHJlM
What does NBA mean?
The core of a Pulsar has never been directly observed. Their makeup is hypothetical. Perhaps an alternative explanation for the observed behaviour would be less astounding... https://www.thunderbolts.info/tpod/2004/arch/040920pulsar.ht...
I think a compromise is more constructive: fix as much as you can in a given period, and then find a better job. Apparently a 4 month programming stint doesn't lookt that good in a CV.
I still have my high-school dictionary, and it has this entry:

quark n. (Phys.) one of several (orig. three) hypothetical components of elementary particles.

That's from the 7th edition (1982, reprinted 1984) of the Concise Oxford Dictionary, about the size of a thick hardback novel.

Granted, there's not much there, but enough to prove that a student's not just making something up.
> Do people really ask their friends for recommendations for things like insurance?

You'd be amazed at how many do. For anything, from insurance to computers. The provider of one's car insurance is a regular discussion topic among those of my colleagues who have a driver's license, and I've seen at least two or three people lamenting about how bad the services they got were and switching to another insurance company on a whim, based on nothing other than the success stories of a handful of people.

Product comparison and review sites, or even Amazon, tend to be perceived as very broad and impersonal, while your bros know exactly what's best for you. I mean that's why they're yo' bros.

I have little doubt that this is economically, and to some extent socially self-destructive, but so is a lot of what we see today :-).
> I'm sure others can list more recent FUD and lies put out by Microsoft.

Really? I had a PC on which Firefox and certain WebGL content would hard crash my machine thanks to what I resume are video card driver bugs. (Upgrading video card drivers resolved that particular instance of that problem)

Given that, it is by no means unreasonable to assume that WebGL content might be able to hit security holes in video card drivers. What that entails, who knows. Presumably going right away and saying "sure, we'll just add a hole to let people stream code directly from the web right into your video card" sounded like a horrible idea.

And since IE is shipped with the OS, level component, it has to be supported to customers for-bloody-ever. (Or so it seems at least!) So there is a higher bar, and all of a sudden releasing patches isn't an "auto-update the world and hopefully don't break anyone" sort of thing like it is with Chrome or Firefox, but now it becomes a "well have to test this patch across an almost unimaginable number of test scenarios and machine configs because we don't want to break functionality that any one of our large customers rely on".

At that point, adding a new feature, which even sorta smells like it could open up a whole new can of worms, becomes, for good reason, somewhat less desirable!

(Disclaimer: I work for MS, but in a completely unrelated area, opinions are my own, those of an overly paranoid-for-the-customers software engineer.)
I recommend learning JavaScript for web (backend) development. In fact, the OP already knows it.
And from what I've heard, bad practices are more common in PHP shops.
>The first link to more documentation at the bottom of the page goes to a book's website, so that's a dead end.

Well, you can read the book online, so how's that a dead end?

>So I'm going to stop here, and do some real work in a pragmatic language.

Well, $16B for WhatsApp, for a company with like 40 engineers, proves that Erlang can be quite pragmatic itself.
The 'o' in Russian is pronounced 'a' half of the time (non-scientific estimate). :(
Ask HN: What are the three most significant things you have learnt till date?
I had to answer this question recently and I realized how different life experiences reflect in your views. I asked some of my friends this question and it was really interesting to hear what others had to say. You can learn a lot from others life experience. You can answer here or on my blog.

My answers were:
#1 Always listen to your heart. It’ll lead you the right way.
#2 Hard work beats Talent when talent doesn’t work hard.
#3 Time heals almost everything. Give time, time.

A much detailed answer can be found here: http://www.deepmusings.com/?p=263
I've run into this a few times, too -- seems to have something to do with the termcap info for tmux's virtual term. FWIW, I was able to work around it with 'stty', e.g.:

$ stty erase ^?

to recognize DEL (ASCII 127, or ^?) as backspace. I have that in my .bashrc on a particular machine that gives me this problem...
You make a good point that perhaps facebook can't monetize word of mouth on the valuable keywords without also destroying the word of mouth. It's easy to see how that could happen. People would stop asking if it just resulted in their friends getting quoted in ads.

But does it have to be monetized to hurt Google? What if Facebook just promoted the idea that you should ask your friends for advice on these things? Maybe something like yelp, but limited to reviews and comments from your circle. Or even just highlighting the conversations when they naturally occur.

Probably wouldn't get to a level that it was a threat to Google, but it might shave some edges off here and there, at little to no cost to facebook.
> I've heard him tell other developers that they should change a single variable name.

That is totally legit, if there is a naming convention in place on the project and the developer violated it. If it's just his personal caprice, then yeah it's dubious, but better an idiosyncratic dictator than no standards at all.

> then come to work the next day to have found out that the manager re-wrote it claiming "simplification" of the code, which is in fact not true

This is extremely common. You've already documented how this shop has no good procedures, so people waste a lot of their time rewriting stuff.

I hate jobs where I have to be someone else's extra hands. It's a sign of poor organization on every level.

That said - I hope as an open source programmer you've learned not to get attached to your code.
I think they could have done Google+ and the whole social aspect better but they are still driving a couple of important buses. I think they should work on an open source WhatsApp clone with strong crypto.

- The browser it the platform of the future...they have a good browser

- Mobile is in everyone's pocket...they have a mobile OS

- Shocking newsflash...people still use mail...they have a good email service

- They provide "cloud office"

- Search is still search

And they have a bazillion other good projects.

If you want to say they slept on something I wouldn't even pick social. I'd say their biggest mistake in recent tmes was that they let Amazon get such a lead in cloud hosting/infrastructure and they aren't the #1 there.
I learned this the hard way. I am the sole developer at the company I work for. I write code for 10 different web products. One of them receives inventory feeds from a myriad of different content providers, and most of these companies (with teams of developers) don't really know the first thing about proper xml design. I wrote a basic framework to do the bulk of the work for consuming their data, but the decisions they made run the gamut from just plain laziness to utter incompetence. Still, I'm not paid to critique their decision making process. I get paid to write the code that makes their data work with our system.
>You are wildly over-estimating how well known Erlang is, even in the dev community

Well, it's pretty well known in the competent dev community. Some guy doing CRUD apps for some enterprise might not know it, true.
Ultimate 2013
http://www.pixbin.us/tottg0
It is always easy to complain but you never know how all this evolved. Maybe the founder had hard times to find the first developer. Maybe the first developer could not do it better. Maybe this setup only attracted weaker developers and suddenly this mess was set in stone. Maybe the business model doesn't provide enough margin to justify a rewrite of large parts of the legacy code and so on.

And I could also easy complain about you: why did you choose this aged stack for your first programming job in 2014? This stack is still very popular and nothing bad but yeah, there must be some reasons why you chose this stack which I don't know.

But I won't complain.
Hilarious Vine
Type in 'ruby-lang.org' and get redirected to the https site where you find 'security' as a main menu entry. There you find known issues and ways to report vulns.

Try this on php.net.

[Edit: I tried to download the stable php release via https. Try to guess how that worked out]
Reason why we hate tourisms in our local area
1) You run latex twice only on really large and complex documents like books, and if you're writing books (not editing, see antipope.org for details) in Word, then you need professional help.

2) Markdown and LaTeX are designed for different tasks. Next you'll be telling me that if you have a leafblower, you have no need for a chainsaw.

3) Find me the structured and annotated data streams first - and show me that the structure and annotations are correct - then lament the lack of a shell that can route them to the programs that don't interpret stdin and stdout and stderr that way anyway.

4) I use vim to write latex when I write latex, but "in a bash shell" doesn't make any sense. You fire up vim from bash, yes, but unless you're trying to do an ex-style editing session, you're not editing in the shell any more than you're editing in the kernel or the tty driver...
The Silverlight developer community has been up in arms for 2+ years claiming the exact opposite, i.e. that they got completely abandoned in favor of HTML5. Part of that is motivated exactly by the Windows OS group having been pushing HTML5+JS as the primary programming model for apps much harder than they have pushed XAML/WPF/Silverlight ever since Windows 8's new app model got first presented. In server/cloud it's all about HTML5/JS and open standards to the point that Azure Mobile Services only now (yesterday, actually) added .NET support after being exclusively Javascript/Node.js only for well over a year. Recent (<18 months) evidence of Microsoft pushing SL over HTML5 would be greatly appreciated.
not sure how this is relevant to hacking/computers or is news related

maybe this would be more relevant in a college forum or math forum