skysight-inc/HackerNews huggingface dataset:
triberian, do you run this digital-era.net web site? I am assuming so based upon your submission history [0].

Folks, don't upvote this submission; flag it.

This submission appears to be largely stolen from other web pages without permission or even, at the very least, attribution.

Compare the last section, "GNU", for example, with the text on the FSF's "What's in a Name?" [1] page -- there are 1,281 words matching.

This article also has 3,663 words matching the front page of another site [2] -- and major portions are lifted right from it.

In addition, triberian's previous submission [3] has 585 words lifted from a 2008 blog post [4]. He even submitted it (apparently) to DistroWatch [5], passing it off as his own. (The bio on DistroWatch says he has a book coming out next month; I wonder how much of it is plagiarized?)

The entire digital-era.net domain should be "blacklisted" (if possible) from HN.

I didn't look any further.

[0]: https://news.ycombinator.com/submitted?id=triberian

[1]: http://www.gnu.org/gnu/why-gnu-linux.html

[2]: http://linuxshark.info/

[3]: https://news.ycombinator.com/item?id=7545557

[4]: http://blog.dawouds.com/2008/11/beginners-guide-to-gnupg.htm...

[5]: http://distrowatch.com/weekly.php?issue=current
True that! And I hope more SDK's are shipped in NuGet packages so we can define explicit dependencies instead of implicit ones.
Python Multi-armed Bandits (and Beer)
Hmm. In all fairness, the full quote is:

A BS/MS/PhD in Computer Science or the equivalent is nice
to have, but the most important requirement is significant
independent programming experience as demonstrated by your
GitHub account, personal projects, academic publications,
or startup success. Your accomplishments are much more
important than your paper credentials.
I really wish Seg Saturn and Dreamcast were better emulated.

I am sad to think abot future game programmers who don't get to play Seg Rally on Saturn. 3 cars, about as many tracks, no transparent glass for cars, but a beautiful driving experience and an excellent game.

There were other great games for Saturn (Nights being important) and other games that were not good but had interesting ideas.
Undisclosed hole in openssh on FreeBSD and Juniper?
:) I assure you that we are going to be hiring engineers through this process.
I've completed the ChucK course on Coursera. As far as I can say, it doesn't borrow semantics directly from synchronous programming languages though it may parallel them. Syntactically it's similar too Java/C++.

Time/Duration are data types, and you must advance "now" to generate samples and events.
WWDC 2014 Predictions Game
When using eval isn't evil (or stupid)
Very interesting article!

A small typo, there's a sentence after the Frama-C code block that ends "[...] and that a subsequent memcpy() of the two regions will return zero" which should have a s/memcpy/memcmp/. Quite obvious, but in an article such as this it's best to be precise of course.
> Consider the scenario where my programme is dangerous for values of an unsigned integer less than or equal to 2. As far as I know, there is no such type for unsigned integers equal to 3 or more. Sure, in object oriented languages you can essentially define your own type, but this flexibility is where you are not protected against yourself.

You can specify that type in a dependently typed language. Then, if you can prove that values of that type can not violate your requirement, there is no runtime overhead.

Are there things which are unknowable or unprovable in a dependently typed system? Sure. But I think your initial assertion that all languages are unsafe to a degree and therefore it can't be their job to protect you against mistakes is unhelpful; it muddies the water by appealing to the fact that 'nothing is perfect/no approach is perfect'. But the whole point with type systems is to eliminate certain classes of bugs - the rest can hopefully be caught by other, less rigorous means, like fuzzy testing and unit testing. All other bugs are relegated to problems which are (in general) undecidable.
You still haven't said the type of the app (web, desktop?), and in case of web, what technology you chose to host it (this is actually the root of many issues that people wanting to host Mono apps face, and it's kind of unrelated to Mono stack).
Hi, can someone help me understand what the significance of FIPS certification is? ( beyond the wikipedia page: http://en.wikipedia.org/wiki/FIPS_140-2 )
Is this aimed at guys moving like one or two boxes?

My parents run a removals firm in the UK, British Association of Removers accredited. Are you hoping to displace the removal industry of people moving entire homes?

The actual physical handling of people's goods should never come down to price, a bidding war on moving the personal belongings of your entire personal life is never going to end well. Unlicensed, unregulated cowboys will never handle your belongings as well as someone who has had training, is fully insured and has twenty years of experience.

Moving people is hard work, it's difficult to judge a price based upon what people say, distance to the truck? Amount of packing that needs to be done? These are all things that can add huge amounts of time, and therefore money into moving home and due to the fact you're dealing with people's hard earned personal possessions something that shouldn't be ignored.
Inflation Protection for Long Term Care Insurance
Heartbleed economics
The argument Rust devs make is that most of the time you would not need to use unsafe code and when you do, being explicit about it would make you more careful and think twice about it.

To me it makes sense. And the example you give here is very relevant. First you'd try to do it within the standard language bounds and only when you realize you can't do it that way, I'll resort to unsafe code. But now your very aware that this part of the code needs to be treated why extra care. So, to me, you're not completely back to square one.

Nicholas Matsakis make this very point near the end of this talk: https://www.youtube.com/watch?v=9wOzjbgRoNU

I would even add, if care is taken to make that unsafe code really small it can even been generated by Coq for instance as stated in some comments here.

That said Rust might not be the best out there for the job but IMHO it shouldn't be dismissed to fast either. It is similar enough to C++ to allow a less painful transition for devs with the domain knowledge.
... And this is why you want to discontinue products and services your engineers can't be motivated to maintain. Amazing.

This should scare anyone who has ever left an old side project running; I could see a lot of companies doing a product/service portfolio review based on this as a case study.
This reminds me my 'Half hour' productivity hack that I've been testing last year: http://blog.self.li/post/34104114881/4-weeks-into-half-hour-...
> these VMs (or the runtimes) have had equally severe vulnerabilities

I just looked at all the CVEs for .NET (62 of them). I did not find related to reading outside memory bounds or running arbitrary code. All the executable vulnerabilities were due related to loading code or escaping sandboxing: irrelevant unless you're running untrusted code in the first place.

A handful of them were due to calling out to an unsafe native library, like to render fonts.

The other serious ones were logic errors, for instance, ASP.NET returning file contents when it should not.

So while technically the VMs/runtimes have bugs, they aren't remotely the same severeness.
> If you think Steve is the only person in the Valley to have lied to a business partner

So, if someone else did it too, it's somehow not that bad?

Great world to live in.
ابراج اليوم السبت 12/4/2014 ، Abraj حظك يوم السبت 12 ابريل 2014
I don't get it either and I have no idea why you're being downvoted.
Not if buying the coins is cheaper than mining them, which is what the GP is saying.
That is true, but I don't think this invalidates my central point that the rational response to heartbleed is to update your contigency plans. The irrational response is to plan the perfect world.

After 20 years of Java we still don't have our perfect VM. It still sees critical security vulnerabilities. I don't think I'm picking on Java unfairly here. Java is a well written code base, it has plenty of unit tests, a proper code review process, a sound architecture. Pretty much all of these have been put forward as ideas that would 'cure' the OpenSSL project. Yet it doesn't seem to be a perfect cure. At some point no matter what your language, VM, OS is you are going to experience something similar.
That's why I kept my Dreamcast and bought a Saturn a couple years ago. Still waiting for Dreamcast 2...any day now.
NuGet itself leaves a lot to be desired.

For one, it's used to install all kinds of crap (like jQuery) and sometimes has all too tight dependency on Visual Studio in its .ps1 scripts.

Next, all the mess with having assemblies for different versions of .NET Framework inside single nupkg -- I want to see the person who decided this will be a good idea.

Third, why include version numbers in directory names? To make it harder to update dependencies?

Fourth, dependencies. "[1.3.2,1.5)" - how cool is this?

Fifth, the whole "Package Restore" concept is flawed.
A job well done. This is actually impressive and quite interesting to see after what you are searching for (afterwards it seems logical :))
my least favorite, having employees sign essentially the same when leaving a company. Really, watched a friend go through this recently. It was that or lose his accumulated vacation monies which were not insignificant.

Been through the non compete issue post hiring, in job for many years when it lands in everyone's inbox. Really? So I am all for them being punted.
D-K goes both ways - unskilled think of themselves highly, highly skilled lowly. I often wonder if this is the ultimate joke of the Universe embedded deeply in the fabric of "matrix".
WeChat Introduces A New Image Recognition Feature
It's interesting that these sorts of problems with memcpy, etc., always boil down to the same thing - C arrays are lowered to simple pointers when they are passed as function arguments. This means they lose their array bounds, frustrating attempts at overflow detection. This has caused endless bugs and endless workaround schemes of varying complexity. I wrote about it as "C's Biggest Mistake" a while back:

http://www.drdobbs.com/architecture-and-design/cs-biggest-mi...

and offered a simple adjustment to C to fix it. I quote from the article:

All it needs is a little new syntax:

void foo(char a[..])

meaning an array is passed as a so-called "fat pointer", i.e. a pair consisting of a pointer to the start of the array, and a size_t of the array dimension. Of course, this won't fix any existing code, but it will enable new code to be written correctly and robustly.
CodeFront.io: The last 3 days for -€50 (extra -10€ with HACKERNEWS code)
Of course they lose work. They have to pay the set-up cost of bundling a new set of transactions for the next block.
> For the first time, kids had easy access to cars, and thus they could be away from their parents more often. The cultural construct we have today of teenagers being so independent from their parents didn't really exist in the generations prior.

You have a very distorted and limited view of history (but then, mine is surely as distorted, just differently!)

My parents were just sharing stories of how, at age 10, a friend would take the sheep, a horse, and a dog, and literally be alone for the full day, before returning at night.

I'd characterize the difference more as "large numbers of youth with no responsibilities", rather than "away from their parents more often". Industrialized societies with child labor laws tend to keep children more separate from adult responsibilities, and prevent them from having meaningful responsibilities.
Running Node.js apps in production
Does speed really matter?
I still prefer the readable Lisp version (SBCL, no optimization):

(defun square-vect (vect)
(map 'vector (lambda (x) (* x x)) vect))

(setq *vector*
(map 'vector (lambda (x) (random 32767))
(make-array 10000 :element-type 'integer)))

(time
(dotimes (i 1000)
(square-vect *vector*)))

Results :

0.084 seconds of real time
0.084005 seconds of total run time (0.084005 user, 0.000000 system)
100.00% CPU
218,686,836 processor cycles
79,876,912 bytes consed

On my system, the C++ version perform like this:

./main 1
1: 270756377 - elapsed time: 0.022324s
~$ ./main 2
2: 270756377 - elapsed time: 0.018883s
~$ ./main 3
3: 270756377 - elapsed time: 0.016929s
~$ ./main 4
4: 270756377 - elapsed time: 0.014268s
~$ ./main 5
5: 270756377 - elapsed time: 0.016093s
~$ ./main 6
6: 270756377 - elapsed time: 0.018651s
~$ ./main 7 # :-)
7: -1455582645 - elapsed time: 5.3e-05s
Am I the only one to read it as "Chuck the Strongly-timed, Concurrent, and On-the-fly Music Programming Language" ?
Those options are confusing for users and can break sites and then users wonder "where is grumpy cat?" :^).
Brilliant fairly technical presentation on Thorium.

http://www.youtube.com/watch?v=AHs2Ugxo7-8

This more or less sold me on the idea years ago.
If you have a couple minutes, take a look inside any of the Microsoft-shipped .targets file to see the mess in its full glory. That's programming in XML, kids.

It boggles my mind why Microsoft went the XML route when designing MSBuild (apparently they were copying NAnt and various other "enterprise-grade" build systems from the Java world), but it would be _so much_ better if they created a special DSL for this particular purpose.

When I see this, I want to kill a puppy or two:

Condition="'%(Identity)' != '@(SelectedFiles)'"
Likely not that much slower. I rather have slightly slower code that is easy to develop & maintain, than code that is fast but hard to read, hard to maintain and easy to introduce bugs in to.
XML legitimately scares me. The number of scary, twisted things it can do make me shudder every time I write code to parse some XML from anywhere - it just feels like a giant timebomb waiting to happen.
I suspect that the chrstian objection to D&D stems from that it teaches you to think for yourself and do frequent problem solving.

Nothing is as hard to control as an independent mind.
Wow. Was it really that simple? The heart beat request sends the text as well as the length it wants back?
Building .Net projects cannot really be solved in a way that compares well with nix systems.

- Windows had no programmability until recently with Powershell. On Linux, I can script literally everything from database installs to component updates.

- Powershell. Unfortunately they got their design wrong. Unix is a text and file based OS; you can script any server configuration with tools like awk. Windows apps doesn't have such a concept. To do stuff, you call... duh.. API!*

- The above resulted in millions of programmers not really getting it. Need a component, alright an MSI file. They don't understand how programmability of the environment can vastly simplify the act of programming itself.

- NuGet solves only a part of the problem. For non-trivial projects, there are tons of things that you need to automate besides library references.

In short, Windows is horrible if you have used anything else. And that is by design gone wrong, somewhere in the 90s.

* When they made the decision to build Powershell, they also had a chance to adopt bash or cygwin. I consider this a historic loss; the lack of a familiar/tasteful shell effectively shut (many of) the best programmers out of the Windows eco-system forever.
Yes. They really only missed the check that the length of the data you sent and the length you said it is are the same.
One could argue that in aggregate the value add was not positive, since the beginning certainly has negative value. ;) Anyway, one could also argue that my comment doesn't add anything either...
So how are your parents today? Have they come back down to earth? Do they recognise this hysteria and admit that it was all rather silly or are they still stuck in the cult-like droning of radio stations and the like?

Because that stuff can turn outright dangerous. What if she caught you watching that cartoon and decided you needed to be ritually cleansed by (for example) submerging into holy water until the demon's convulsing stopped? Just a thing I randomly thought up, but TBH I'm sure it happened.
Interesting to see this hit big companies like google. The problem, I think, stems from the idea that most people treat XML parsers as a "black box" and don't enquire too closely as to all the functionality that they support.

Reading the spec. which led to the implementations, can often reveal interesting things, like support for external entities..
Haskell:

let square = map (^ 2)

Real partial application and currying is something I'm longing for in other languages; it's easy to fall for the beauty of the Point Free Style.
shameless plug:
fortrabbit (i am founder) is dedicated "PHP as a Service". Our infrastructure provider is AWS Ireland, we have a lot of clients from the UK.

at least one alternative:
http://viaduct.io/ looks promising to me. seems to be from the UK, running on own hardware.
I'm curious how you get around normally being able to only run one instance of the iOS simulator at a time? Having a load of OS X machines for each individual stream or even virtualised hosts cannot be the case surely?

Either way it's done, it's a very impressive way to show off your apps and works suprisingly well.
Why would installing something like jQuery be a bad fit for Nuget? It's a dependency like any other, just because it's in JS doesn't mean you shouldn't handle it the same way you would other packages.

Versions in directory names make sense if you've got multiple projects depending on different versions of the same package. Upgrading everything at once isn't always an option.

Could you elaborate why package restore is flawed? And do you have an alternative that doesn't involve putting all your dependencies in source control?
That's a great idea. I'll see what I can do!

Edit: Just added the permalink feature, thanks for the tip!
Self-signed certs are OK in every scenario that HTTP would be OK, and then some.
My guess would be a team to provide a data-centric approach to investment. Crunch a whole lot of numbers to identify industry trends and specific firms that are promising, and see if those can replicate human performance.

Or they're simply handling recruitment for a stealth portfolio startup.
Why Banking Systems Succeed – And Fail
I'm only going to vote Pirate Party for the European Parliament, not the Riksdag election.

I didn't say PP was relevant for the Riksdag election. But I do hope that their issues get exposure. I didn't say I hope their issues are the only issues discussed.

Don't tell me that you think the issues around FRA and DLD are irrelevant.
Show HN: formal verification for Firebase
Did you know that most heart attacks occur on Mondays?
What is wrong with gpl v2?
And what does this tell you? Someone thought that was more worthwhile writing about than telling voters about what PP's representatives in the Europarl have been up to.
Can an actual list of policies be posted somewhere ? - I don't ever recall there ever being a discussion of such a policy before. Certainly there have been highly voted non-HN job posts in the past (e.g. Khan Academy)
This is why xkcd is unique - not because of the puns or nerdy references, but because of Randall's ability to make complicated issues simple.
Yes. Here is a PoC in Python:

https://gist.github.com/takeshixx/10107280

On line 42 is the heartbeat request payload. 40 is the length of the message in hex = 64 bytes.
Compare with the control flow heavy managed time [1] version:

on widget.Mouse.Down:
| var pw = widget.position
| var pm = widget.Mouse.Position
after:
| widget.Mouse.Capture()
| widget.position = pw + (widget.Mouse.Position - pm)
| on widget.Mouse.Up:
| | widget.position = widget.position # freeze widget position
| | break # stop the after block so capture/dragging stops

[1] http://research.microsoft.com/pubs/211297/managedtime.pdf
I'm not really sure why references are being used here, if you're just making a copy straight-away.

vector<int> square(vector<int> vcopy)
{
for (int &i : vcopy)
i *= i;
return vcopy;
}

is shorter, (IMO) much more readable, and on my tests, measurably faster than the reference version. If you really want the std::accumulate version,

vector<int> square(vector<int> vcopy)
{
accumulate(begin(vcopy), end(vcopy), begin(vcopy),
[](int i) { return i * i; });
return vcopy;
}

works just as well.

Still, I guess it's beside the point.
100% agree. I see parallels between Bitcoin of 2010s and dotcoms of the late nineties - overvalued, overhyped, and predictably crashed hard. But what once the crash cleared all the hype and hysteria, what was left was something useful. And that's why tech is booming now.

I foresee the same for Bitcoin. It will crash hard - heck, one could argue that it already has - but once people stop seeing it as an "investment" and start seeing it as something useful, cryptocurrencies just might rise again.
You're correct, it is a case of Not Invented Here syndrome.

To discover MTU you could ping, or send packets on port 80 or any other myriad of ways, but no, its not exactly within ssl so...