skysight-inc/HackerNews huggingface dataset:
> Almost all these points apply to javascript as well.

Sort of.

The article talks about why CPython, an implementation of the Python language, is slow. You're right that a naive implementation of Javascript would have many of the same problems, and indeed many of the first implementations of JS did have these problems. But due to heated competition, Mozilla, Google, Apple, and Microsoft have invested a huge amount of top-quality engineer-years into optimizing their implementations of JS.

Implementations of Python, in contrast -- and CPython in particular -- have not received the same sort of love.

I largely agree with the notion that the speed of modern JS engines serves as an existence proof that Python could be similarly fast.
Show HN: Yellowlab.tools, JavaScript performance analysis tool
Hacking in TV Shows Is Awful, but Should We Care?
Your link you posted appears dead now: https://i.imgur.com/39ymlzy.png
Right. But as I read it, the 160bit hash is over the content, in order to find peers with the same content. So if I wonder who's got a certain leaked document, or a certain media file, the hash can be used to xheck for that? Could be enoygh to get a warrant, for example? If I know a certain document, say payslip.pdf and guess it is in a folder named payslips - maybe I could guess the other values and verify my guess with the hash (yeah, probably not a very interesting example ...)
According to http://www.bls.gov/data/inflation_calculator.htm, the $25,500 he paid in 1968 is equivalent to $174,419.27 in 2014. And, he paid that because (or despite) feeling he had few options ("stuck in the racket"). Further, this does not include his investment in his vehicle. The medallion fee is a huge (seems opportunistic and cruel, in fact) barrier to entry relative to the newer models of Lyft and Uber.
The RNA world
Go can already leverage some of gcc's optimizations. There's also https://github.com/go-llvm/llgo
The 1,624ft 'Palace of the Soviets' tower that was never finished
What Google Knows About You
NASA Computer Model Provides a New Portrait of Carbon Dioxide
Nobody’s suggesting that self-signed certs be treated as trusted or CA-cert equivalent, only that they not be regarded as worse than unencrypted http. In the proposals being discussed, that attack would no more of a threat than MitMs currently are against http.
#73 mark@chromium.org
This was released to the stable channel today in version 39.0.2171.65.
Thanks for your patience, everyone.
Status: Fixed
Yep, that's fair.
I think this article is relevant context- Sarah Lacy is a professional troll:
http://www.cnet.com/news/journalist-becomes-the-story-at-mar...
In my case, when I was much younger, I skidded on some gravel and went head-first over the handlebars. I had a finger-thick dent in my helmet. I'm glad that dent was not in my skull.
Glad you have a friend like that. Please continue the social pressure and actively encourage your less self-preseverational friends with the same message. I yelled at my non-helmet wearing friend (otherwise very bright) and eventually he started wearing it. Social pressure can bring good change.
It is novel, in terms of there being any such service in existence, ever.
Upvoted for "diving into a pool of paved road". Glad you are still around to share that mental image!
I think this is a fair rephrasing of my claim.
I've had the exact same concerns as the person you replied to. I just want to make sure since the title differs from the one you stated. Is this the book you were talking about: http://www.amazon.com/JavaScript-Good-Parts-Douglas-Crockfor...
And how/why did the book improve your opinion about the language?
Security is a poor word, but if we define it as quality (reliability, fitness for a stated purpose, logical consistency, etc), then access to source code allows peer and public review. IMHO, free software is just the scientific method (loosely) applied to programming (with a moral context). Test-driven development is an attempt to tighten up the hypothesis-implementation-analysis loop.
You are right that there are some problems in the language. However, I would rethink your argument based on the rapid development of the language over the last 5 years.

For example, yes callbacks were very messy but very soon we will have generators. And, yes, the scoping was nasty but soon we will have the 'let' keyword. I cannot remember where I read it, but I do also remember seeing a talk about some proposals to extend "use strict" to allow people to fix some of the type-casting behaviours made infamous by wat, too.

My point isn't that everything is fixed and we can stop complaining about the bad parts. My point is that it is very impressive how those in charge are handling the evolution of the language.

I think it's worth taking a bet on a language which improves so much every year.
... said the monk, sitting cross-legged with an air of zen inner peace ; )

I think it all boils down to considerations of idealism vs. realism, in the end, and yes, I have to admit, I managed to get a sort of big picture understanding of Yesod and its ORM, and it's definitely a cool design. Can't say I know as much about Happstack, but the hello worlds were smaller. And the authors didn't have to invent two dependency management tools to get it to compile... /off-topic

I actually used something akin to monads to write a quick and dirty parser combinator library... In PHP! It was really fun, but I have to admit that it got really hard to keep track of what was function, what was return, what was supposed to be passed along to the next function and so on without any real typing. For the first time I... I wanted monads.

But still, I have 99 problems and I'd say 97 of them are undefined, nulls, erroneous typecasts, unexpected layers of wrapping, and so on. I wrote bad code, my teammates did, and here we are. I want to get rid of those so that I can, at last, have real problems.

Then I'll port my REST server in Haskell ; )
Let's Encrypt can run a web spider - crawl the web to build a database of actively used domain names.

Periodically poll DNS for the list from that database to obtain the NS records for pretty much all of the web, and also A records for all the actively used hosts you find in the crawl. Keep this cache as a trace of how DNS records change.

Now, do the DNS polling from several different geographic locations. Now you've got a history of DNS from different viewpoints.

When you get a request for a certificate for, say, "microsoft.com", look up the domain name in the way described on the Lets Encrypt description. But also check that this IP address appears in the history, either from multiple locations for a few days, or from one location for a few months.

If this test fails, check if the historic IP addresses for this domain from the polled cache are already running TLS, signed by a regular CA. If so, reject the application.

Otherwise continue with validation in the way described on the Lets Encrypt web page.
So how well do you know HTML...? My number one favorite.
Maybe in the '90s. Today's students are busy cooking up ways to use ambient radio signals ("illuminators of opportunity") as passive radar to see into houses.
The main benefit of types for me is not correctness but documentation and tooling. It's fine not to have types in code I write myself or with one or two others. But if I have to deal with a large codebase that I wasn't involved in writing then types make it so much quicker to understand. Just being able to quickly find all references to a type or all a method's call sites makes it possible to "reverse engineer" the design from the code.

This tool claims it can do advanced inference. If it were possible to hook it up to an editor or IDE to analyse existing untyped js in this way it could be invaluable.
ES6 adds lambdas, destructing assignment, default/rest/ spread arguments and template strings - all of those reduce verbosity. And there is `let` which has a "normal" scope, although I'm not really sure it needs that. Additionally, generators let you use normal control flow constructs for IO, if you prefer that to FP.

While its no Haskell, it certainly isn't much more verbose than other dynamic languages anymore. And a typesystem like TypeScript or Flow pretty much eliminates the rest of the gotchas.

Off the top of my head, there are two embarrassing holes: bigger integers and parallelism. Can't think of anything else at the moment (macros maybe, but they're a double-edged sword wrt tooling). Wonder if anything else is missing?
A convertible note keeps you and the founder from actually having to price the value of the company today (which no-one can really do anyways). Do: See if the shares convert to common or preferred (you REALLY want preferred, thats what investors get - and at this stage you're an investor, of your time). Also protect both of yourself with goals that are well thought out, and make sense. Also remember that tasks like "Grow top line revenue by 30%", etc can actually be very difficult to do at first. Potentially make it based on # of quality hours put in. Do Be ok with the fact that there is only a 1/10 chance that you'll see much if any money out of the deal. Do ask about existing other shareholders, a plan for revenue, and the sales approach. Do look at the revenue model.
Also mobile app stores.
I think making comments this stupid as a SVP is a fireable offense and I can somewhat see how the "family" mention makes Sarah Lacy worried about her children, but I totally don't get where this gender angle is coming from in this story. I don't read any of that in the original comments by Emil Michael.
Is it Hayes compatible? ;)
There's a lot of groaning about the constraints of the platform (battery life, available interface components, etc), but I for one am excited by these constraints. It can be a really fun and interesting challenge to design within constraints, and in this respect the watch reminds me of the early days of mobile computing. Those tiny little battery-limited devices forced one to think differently about what a UI is, compared to the gargantuan desktop computers and their nearly cinematic display resolution.
I don't see a horror story. Could you explain it?

In the Netherlands, 1/4 of all trips, and 8% of all distances traveled, are by bicycle, so the numbers reported there are hard to compare to other countries.

What level of fatalities and head injuries would count as "not a horror story" to you? What level of fatalities by running or jogging would count as "not a horror story" to you?

(BTW, the statistics only list "head/brain injury". I presumed that a scratch on the chin would count as a head injury. Also, the text under "And more from the same paper" does not exist in the referenced paper. The text says the 'estimates are partly based on research carried out in countries like the United States and Australia', so don't really reflect the infrastructure.
I wish they'd get rid of karma, or at least make it invisible. Voting on posts is useful for prioritizing comments in threads, but the overall comment score just creates motivation to farm for points.
I'd speculate that if you're unlucky about link order, two hot cache lines may get mapped to the same slot in an N-way associative cache -- whereas if you're lucky, they end up going to different slots and don't continuously evict each other.

With regards to alignment... do linkers typically pack objects so tightly that the start of each object isn't aligned on a cache line boundary? AFAIK they're typically 32, 64, or 128 bytes.
Private to the NSA and reasonably private to the person sitting next to you are different use cases. The current model is "I'm sorry, we can't make this secure against the NSA and professional burglars so we're going to make it difficult to be reasonably private to others on the network".

It's as if a building manager, scared that small amounts of sound can leak through a door, decided that the only solution is to nail all the office doors open and require you to sign a form in triplicate that you are aware the door is not completely soundproof before you are allowed to close it to make a phone call. (Or jump through a long registration process to have someone come and install a heavy steel soundproofed door which will require replacement every 12 months.)

After all, if you're closing the door, it's clearly meant to be private. And if we can't guarantee complete security against sound leaks to people holding their ear to a glass on the other side, surely you mustn't be allowed to have a door.
> The down-side is that if you decide to move registrars, that still complicates things. What if the new registrar refuses to issue a new cert without a hefty fee?

Then everyone stops using that registrar and they go out of business.

> Or what about revoking the previous cert?

You're asking this as if there is some kind of functioning method of revoking certificates already. If anything this makes it easier because it could be plausible for clients to somehow retrieve who the registrar is for the domain and then only accept certificates signed by that registrar.
I'm really curious about the accuarcy of that tool,really really curious given how javascript "types" work.
There's no such thing in X509 as a cert which is authorized only to sign certs within a certain subdomain. A CA is either trusted or not; if it's trusted, it can sign off on a cert for www.google.com.

A system where there's a .com root cert that can sign authority certs for .com subdomains, which themselves can only sign for their own subdomains - that's a great idea. Not part of the standard, though.
Yes, the Lambda function is run in an Amazon Linux environment.

I published some explorations of that environment here: http://alestic.com/2014/11/aws-lambda-environment

Let me know in the comments on that article what other commands you'd like to see output for.
That was a terrible article by a terrible person.
My biggest two problems with recruiters.
1. They aren't technical in the least (90% of the time) and waste my time by trying to act like they are. You should understand the field your recruiting for. Not saying they have to know much, but have a basic understanding of programming and can write a 'hello world' app.
2. At least part of their commission would go to me if they weren't there. I'm not saying it would be everything, but I'm losing out on some pay everytime I go through a recruiter.
Voyage to Social Discovery
Under our current system... yes.

Cops can lie to you to extract a confession.
Hey, I'm a C# mvc dev looking for cool stuff to build. Email me erasrz at Google's mail if you need help with this thing. Cheers
Accidents may be less probable, but if you happen to be one of the unlucky ones who does have one you could still die or suffer severe brain damage, so why not just wear the helmet? Sure it makes you look a bit goofier, but that's a small price to pay to protect your melon.

I do a lot of downhill mountain biking, snowboarding, etc, so I'm not one of these people that tends to be overly worried about safety, but whenever I get on wheels or something that can easily slide out of control I wear a helmet, period. I'm (pun intended) painfully aware of the amount of impact force a rotational component can add to an otherwise relatively low-speed, low-altitude fall.

Maybe the drivers are more cognizant of bikers in the Netherlands vs the US, but I still wouldn't trust them, they are not infallible and it only takes one of them one fuckup to mess me up. A helmet is a very effective (though non-perfect) fail-safe for this that costs virtually nothing (amortized over time of use before it is needed, hopefully never) and has no real downside other than pure cosmetics.
Runtime metaprogramming. In Python you can create new classes and add methods to existing classes at runtime. If you AOT-compile everything to assembly, you have to take away those runtime features, and then it's not Python anymore.
Uber is a perfect example of the inefficiency of the public sector: nobody can squeeze money out of you at all levels of interaction like a corporation.
The requirement for 64 bit support for SSL VPNs has always required I live a hybrid world on the Mac - browsing with Chrome, and launching 64-bit firefox to connect to VPNs. It will be interesting to see if I can live in an all chrome world if I chose.
There is such a thing -- name constraints. It allows exactly what you describe, limiting the valid names for certificates signed by the certificate.
You can definitely find department store bikes for less than $100. You get what you pay for.

$200 for a decent bike might be a stretch, but $300 definitely gets you in that range.
Ask HN: What are some security senior projects for a college undergrad?
Yuck, yeah, that last item of the contents taking up a full second page is really annoying. It would be much more usable and fitting to reduce the blank space above to fit the whole thing. Seems obviously not hand tuned.
JavaScript actually has a pretty small number of type primitives; I'd say that the bad rap about JS's typing is due to the absolutely mind-boggling type conversion rules (which are nevertheless part of the specification).

Even if that wasn't the case, their design just avoids the issue by not trying to do any typecast, ever.
hey orand, thanks for the summary.

You mentioned #4 will be available later next year, probably starting with a beta released at WWDC.

Is Apple actually saying this? If so, can you please share the source? I mean from Apple not macrumors.
You can do it, but you shouldn't advocate it. Arguments against widespread use:

- making people wear helmets will make less people bike, less people biking on the road leads to more accidents with bikes, and more deaths [1]

- a helmet may make people in general more reckless [1]

- cars will pass closer to people when they are wearing a helmet than when they are unprotected [1]

- if people need helmets, cycling is apparent a dangerous activity, attracting risk-seekers, skewing the statistics [1]

- compulsory helmet use in Australia seems to support some of these (perhaps) counter-intuitive arguments [1]

- helmet itself is dubious [2]

Morale: sure, wear a helmet, but don't evangelize its use. It's a tragedy of the commons if you will succeed.

[1] http://hanlonblog.dailymail.co.uk/2011/07/should-my-son-wear...
[2] http://www.tbd.com/blogs/tbd-on-foot/2011/08/idea-of-the-day...
They do, and there are companies setup to make those kind of loans but the parameters have to be just right.

Also things like IP, or growth curve, can usually not be used as collateral. You start to need deep analysis of those assets and people willing to bet on them which is where VCs come in.
I believe that's essentially what Cython allows you to do, by way of C. Since the Cython compiler isn't especially advanced, it requires some hints to get good performance, which is why Cython code is usually typed, structured more like C, etc. But still, it executes on your basic idea.
> Instead of celebrating one of humanity's biggest achievements, Matt got tons of negative criticism for wearing an apparently offensive shirt, designed by his (female) friend.

Not mutually exclusive.

> The message they want to convey is that people (when they really mean women) should not be judged by how they dress - but at the same time attack a man, wait for it,... because of his shirt! Double standards, methinks.

Complete distortion of both the argument against the shirt and the concept of "she was asking for it" and he was acting in a position as a representative.

> It's almost a wearable altar to a woman's body.

Oh so it was a compliment. Why didn't women take it as a compliment! Just like catcalling right?
The issue is getting the plutonium.
A study by Pandora suggests song plays increase album sales
Bl.ocksplorer.org – Learn D3.js by Example
One fundamental difference between rugby and NFL is how many players are involved in frontal impact on each play or phase of play. In rugby football you are only allowed to tackle a player with the ball (except in rucks and mauls, which are by their nature more structured) whereas in american football there seem to me to be a whole lot of players running headfirst into each other on every play.

Having said all that, my experience with rugby players is that there is a certain bravado about injuries, that if you haven't cracked a few ribs, broken a clavicle, had a stud through your cheek, etc. then you aren't playing hard enough; and should therefore buy the next round
One of the studies we were shown in a usability class was that pretty interfaces are rated by users as more satisfying and actually are better at letting them accomplish goals as well. If you went to a really ugly web site with lots of clutter, like the myspace era, and got a progress dialog, for example, you might just ditch the web site. Whereas if you went to a beautiful web site and it gave you a progress dialog, you might be willing to give it the benefit of the doubt, for example. Sort of like how tall, good looking people earn more money. Sad, but factual.
"Javascript, however, is not really slow anymore."

What's easy to lose track of under the steady stream of headlines about this microbenchmark going 5x faster and that microbenchmark going 10x faster and this one microbenchmark being "faster than C" is that Javascript is still a fairly slow language, though. Flick that to compare Javascript vs. C: http://benchmarksgame.alioth.debian.org/u64/benchmark.php?te...

It has come a long way. It is, of course, still usable for many things. But it is still an interpreted language, and my guess is that we've basically plateaued on performance for Javascript, and it's important to remember that it isn't as "fast as C" in any useful sense of the term. And for that matter, to get even that performance out of JS seems to require you to write a very specialized subset of JS that will tickle the optimizers correctly. In practice I suspect you will get even worse deltas over C, which, for all of its many failure modes, does make it often easier to do the fast thing than the slow thing, usually regardless of the correctness of either of them.

(That's why we have asm.js, after all. You can't have both of "Javascript is as fast as C" and "asm.js is several times faster than Javascript", because the composition of both statements is absurd.)
No because its fiction, not a documentary.
I disagree. The defensive move would be to take the whole lane and not give them room to pass.
Completely agree that open source is critical to making claims about security. Else you're asking people to trust you.

Not to be pedantic but the gotcha is that you can't know they're using the open source software as-is. If they run a hosted service or distribute binaries you won't know. Also with cryptography any change (diverging from the open source software) can have regressions.
Perhaps not 2 seconds, but I just checked and a 41,000 line Java codebase I work on compiles from cold in 3.4 seconds.

I'd never bothered with incremental compiling because the build times are so low, but I just tried now and changing 1 java file leads to a 0.3 second rebuild.
This also fixes the Java 8 support in Chrome on Mac, which didn't work because Java 8 only supported 64-bit browsers:

https://www.java.com/en/download/faq/chrome.xml

For those of us that still need to access legacy systems (routers, switches, etc.) that have Java interfaces, this is a pretty major upgrade.