skysight-inc/HackerNews huggingface dataset:
"but that it shares some common features, both good and bad (ease of writing, gc) with some other 'scripting languages'."

And that the useful criteria are changing, as in my reply to Retra. Who in 2014 is sitting here selecting a language based on whether or not it is "compiled" or "interpreted" as opposed to picking it based on libraries, or simple real speed (as opposed to worrying about where the speed comes from)? Who saw the wave of Javascript JIT interpreters and yelled "Crap, there goes Javascript, because now it's 'compiled' and that change now makes it suck"? The way we're going to be characterizing language families in 2020 will make such 1990 concerns look quaint and there's little reason not to start thinking about it now, since 2014 looks more like 2020 than 1990.
There is no good solution to the "password storage problem", as you call it. The fundamental issue is that "storing passwords securely" is the wrong problem to solve.

Think from the perspective of a non-technical user. You're lazy, so you want to use a short password that's easy to remember, and you want to use it on every website.

Now think from the perspective of a software engineer. Your non-technical users will use short passwords that are easy to remember and therefore easy to break. And they will use that password on every website. So no matter how you store your user's passwords, some idiot server administrator somewhere will store those same passwords in plain text, and they'll get hacked, and the hackers will have access to your user's passwords.

So the problem isn't "how do I store passwords securely", it's "how do I prevent my users from giving their passwords to an idiot server administrator who won't store them securely".

And as a technical user, I also have this problem, which is "how do I know if my server administrator is an idiot and is storing my passwords in plain text?" The solution to this is to use different high-entropy passwords on different sites, but this is tedious.

If ZKPP (zero-knowledge password proof) is widely adopted and supported in browsers, it solves both the server administrator's problem and the technical user's problem:

1. It stops idiot server administrators from storing passwords in plain text. The "zero knowledge" part of ZKPP means that users never give server administrators their password or any knowledge about their password, so administrators can't store the password stupidly.

2. As a technical user, I can now use the same password on multiple sites, provided a) my password is significantly entropic and b) all those sites use a ZKPP scheme. Since I never give the password to any site, I don't have to worry that one of them will store my password stupidly. My browser does the job of providing different authenticators to different sites, so breaking one authenticator doesn't break all of them.

3. A non-technical user with a low-entropy password on multiple still runs the risk that their password will be broken one one site, breaking it for all sites. However, the non-technical user is still better off because a) their password is at least properly hashed on all sites, rather than being stored in plain text, which will make an attack more costly, and b) caching password hashes amortizes the performance hit of password hashing, so we can afford to use more secure hashes, which again makes an attack more costly.

NOTE: I don't know the details of SRP well enough to know whether all these benefits apply. I do know that SRP claims to provide a ZKPP, so I'll tentatively lump it in with ZKPPs, but I haven't actually verified the algorithm personally so I can't speak to its security.
Rust is a statically-typed systems programming language. A language where deal with pointers and manage memory. In the way of purpose and design, Rust has next to nothing in common with Perl, Ruby, Python, etc. I don't understand these comparisons, but then again I don't get the comparisons between Rust and Go either.

We should be comparing Rust to modern C++, Nim, etc.

I do feel comfortable with your Go / Python comparison, though. Not insofar as intent, but rather in the people that are adopting it and in the places it is being deployed. Golang seems to be carving out an interesting little niche between managed and dynamic languages.

Rust, on the other hand, looks like it can (will?) steal C++1x's thunder. Games, browsers, applications, operating systems... I really want to write new stuff in Rust.
That may have been the reason awhile back, but it's not the case for the vast majority of projects these days. Though the stigma may still be a major cause for lack of traction.
Yes, escape analysis does tend to eliminate some unnecessary heap allocations but they're specifically isolated to a single subroutine (it's better than not having it). Whereas with Rust, you can safely pass around references to stack allocated memory to other subroutines, given proper lifetimes.
(Christian from Stripe here.)

Our users tend to want unified behavior across payments of all different types. Of course, it's possible to filter by payment type in the API, dashboard, and data exports.

To the original question: drop us a line at bitcoin@stripe.com if you want to talk more about not converting the payments. It's definitely something we'll support if there's user interest, but it's not something we do today.
I think typically they use thermic lances, because torches aren't even close to enough.
They do not see themselves as targets. Their systems are likely bespoke, or at the very least obscure. And, more importantly, they have bigger problems to worry about, like operating their businesses.

As it becomes more clear that yes, someone will go to that trouble and it will have catastrophic consequences, you would hope that these things would get better.

More likely, someone will pay a "security consulting" company $100 million to run a Nessus scan and tell them to turn on Automatic Updates on their Windows infrastructure.
And yet there are multiple literary, movie and TV adaptations of all of those characters you mentioned that were not created by their original authors. Not to mention the tons and tons of crappy fanfic that nobody reads (except me, apparently).

Also, let's not justify the desire for having things for free by calling somebody's artistic labor a "cultural idea" and implying it should be made available for free. If you find value in something, pay for it as the creators wish. If you wish to build on top of it, license it.
> escapes my mind

Love the post. Were you thinking of Nim [1]? It recently benchmarked close to C++ in speed [2] and it will assuredly continue gaining ground.

import rdstdin, strutils

let
time24 = readLineFromStdin("Enter a 24-hour time: ").split(':').map(parseInt)
hours24 = time24[0]
minutes24 = time24[1]
flights: array[8, tuple[since: int,
depart: string,
arrive: string]] = [(480, "8:00 a.m.", "10:16 a.m."),
(583, "9:43 a.m.", "11:52 a.m."),
(679, "11:19 a.m.", "1:31 p.m."),
(767, "12:47 p.m.", "3:00 p.m."),
(840, "2:00 p.m.", "4:08 p.m."),
(945, "3:45 p.m.", "5:55 p.m."),
(1140, "7:00 p.m.", "9:20 p.m."),
(1305, "9:45 p.m.", "11:58 p.m.")]

proc minutesSinceMidnight(hours: int = hours24, minutes: int = minutes24): int =
hours * 60 + minutes

proc cmpFlights(m = minutesSinceMidnight()): seq[int] =
result = newSeq[int](flights.len)
for i in 0 .. <flights.len:
result[i] = abs(m - flights[i].since)

proc getClosest(): int =
for k,v in cmpFlights():
if v == cmpFlights().min: return k

echo "Closest departure time is ", flights[getClosest()].depart,
", arriving at ", flights[getClosest()].arrive

[1] https://github.com/Araq/Nimrod/wiki/Nimrod-for-C-programmers

[2]: https://www.reddit.com/r/programming/comments/2pvf68/armv7_v...
That situation has improved. For a long time, the libraries for a MySQL database and for parsing HTML were completely different on Python 2 and 3. Now, at least, there are libraries for those operations that work on both platforms. It's taken years for that to happen, though. I'm considering porting a production Python 2.7 system, and it now looks feasible to convert it to using different packages on 2.7, then convert to Python 3.x.
Yes, many. See e.g. The McMartin Preschool Trial. http://en.wikipedia.org/wiki/McMartin_preschool_trial

>"By spring of 1984, it was claimed that 360 children had been abused."

All of these linked allegations later turned out to be complete fabrications, creations by the investigators invented out of whole cloth, and targeted against the same specific individuals.

In fact false accusations from multiple individuals are a common police tactic. Perhaps the individual has slept with several others, and the encounters ended non-violently but non-amicably. Suddenly consensual encounters retroactively become remembered as non-consensual after questioning by investigators, the very purpose of which is to elicit accusations. As a representative at these hearings, and student advisor, I've witnessed this happen to students many times.

See also the DSK trial, where a French author from years before brought charges that were similarly dismissed. The bandwagoning effect occurs regardless of whether the allegations are true or false. People want money, power, special treatment, and attention, and sadly, false allegations are often an easy mechanism used to get them.

So yes, both false allegations and true allegations are unlikely to be made independently. Not to mention the truly crazy people who are completely uninvolved and will jump in for no discernible reason whatsoever, or in criminal cases CIs who are transformed into additional "victims" to secure convictions.

This isn't a story of math to the rescue. It's a store of bad statistics and not paying enough attention in class, where they usually teach some variant of the prosecutor's fallacy, since this type of falsity comes up often enough to warrant consistent reinforcement that statistics aren't magic, and they can ruin people's lives.
It's the packaging aspect of it -- BPG has an encoder ready to encode images, and Javascript ready to copy-paste into your web pages.

It might be a good way to get traction, even if it's not the end product.
Scala hits all of those checkmarks (and checks them off more completely than go) and is explicitly designed such that you can use it as a scripting language.
1) No, and partly on purpose. It's impossible to get 100% accuracy with automatic character->pinyin converters, and is very easy to get incorrect values even for common words and I believe this is a danger for new learners and so for the moment have not implemented this. At some point I hope to start creating curated content with the tool and that will be able to provide the full, correct pinyin.

In the meantime, it does have the ability to show pinyin definitions for individual words (rather than bulk conversion), and it can export tab-separated lists of all unknown/looked up words, including with pinyin, definition, sentences containing the word (with or without cloze deletion) and more, which can then be imported in a flashcard program such as Pleco or Anki.

2) I'm not sure off the top of my head of any Mandarin ebook stores, but this thread on Chinese-Forums has a few suggestions (some of which may now be out of date so check towards the end for more recent sources):

http://www.chinese-forums.com/index.php?/topic/34090-best-so...
Do you think if the same experiment were to be repeated today; the results would be different?

The link mentions related experiments with similar results as recent as 2008.

Anyway, judging by "The Diagnostic and Statistical Manual of Mental Disorders", Fifth Edition (DSM-5) (2013) there has been no paradigm shift in the last 40 years.

It seems DSM-5 is bad even by psychiatry's own standards. People use phrases like "false 'epidemics'" https://en.wikipedia.org/wiki/DSM-5#Criticism

New DSM-5 Ignores Biology of Mental Illness
http://www.scientificamerican.com/article/new-dsm5-ignores-b...
Well,with the release of ES6,the author should expect an EXPLOSION of frameworks,especially class based,IoC driven ones. ES6 brings loads of features to the language,some features will lead to complex codebases (proxies,modules,loaders,realms,quasis...).

It wont be just about sticking a few js files together.Js dev will get more complicated as times goes.

AngularJs and co are just the beginning of a trend that will accelerate exponentially in the next 3 years. Be ready for endless variations of Angulars and Reacts.
A better, more serious answer: always have two networks. Preferably physically separated (though I hear virtual networks are pretty ok with the right router equipment). The machines holler on one, and the administrative support on the other. I've seen what happens when it's even just tried to put both on the same layer, and it's inevitably some form of minor disaster. Not just because of security, mind, but because you really don't want your file transfer to a network drive to even slightly lag a sensor yelling back to the PLC about an interlock's state.

If you need to get on the process network, use a VPN, and only open to a machine that can't actually run equipment. A programming terminal may be made available to save costs so an integrator doesn't need to fly in for every support call, but these access points tend to require a VPN through at least two firewalls. (And even then, often you would still insist on them coming in person, for all manner of other reasons.)
2. As a technical user, I can now use the same password on multiple sites, provided a) my password is significantly entropic and b) all those sites use a ZKPP scheme. Since I never give the password to any site, I don't have to worry that one of them will store my password stupidly. My browser does the job of providing different authenticators to different sites, so breaking one authenticator doesn't break all of them.

Go through the exercise of cracking an SRP authenticator to see the problem with this logic.

Weirdly, despite saying upthread that I must not know how SRP works to say what I'd said, you now say that you're not familiar with SRP. If it helps, substitute your favorite password protocol instead of SRP. I believe the problem will be the same.

If not: happy to learn something new.
Archlinux defaults to python3 (the default python is just a symlink), and most of the things are pretty good, though there are plenty of python2 related problems, and problems because of the devs patching the upstream distro too much...

All in all it's quite okay, and definitely on the right path.
Just checked on my 2007 MBP--I'm also getting flashes. (Translucency is turned off.)
>Python3 was never intended to be a "one way to do everything language".

Python's motto is "There should be one-- and preferably only one --obvious way to do it." - its not meant that Python should be the only tool, but that written python code should only have one have common implementation. (https://wiki.python.org/moin/TOOWTDI)

Golang also seems to share the same ideal when it comes to written code.
That isn't the first time such a comparison has been made, and the people making it are always remarking more on the culture surrounding the language than its implementation details (not that the latter are irrelevant, but Python certainly could be a Compiled Language™ if Guido so chose). The takeaway here is that both Go and Python codebases lend themselves to team efforts between early contributors and new arrivals, because the set of idioms you'll find is very consistent from one codebase to the next. This promotes a certain confidence in teams working on very large projects, as well as tools that must be maintained for a long period of time. It's a hard thing to measure. You certainly won't identify it just by asking what features the language has.
sshcam:  Webcam live streaming in SSH terminal
That just makes us even more embarrassing.
>However, as the libtrust and v2 image work, and subsequently, registry protocols are still in draft and security review, it is difficult for us to recommend that users yet attempt deploying these.

I am not sure I agree with this. You have deployed these draft protocols in 1.3 resulting in CVEs for the pull ops. For me (and I think for every software release engineer), I would deploy something only as part of a test branch and not as part of production code. This is (IMHO) bad engineering practice for such a vital piece of software. Not good.
None of the upgrades in ES6/ES7 obviate the need for frameworks. Maybe some libraries are made redundant, but frameworks address more interesting abstractions that a general language probably shouldn't cover anyway. Frameworks seem to adopt more opinions about implementation, and help unite a team over a set of ideas, and enable them to move faster and reason about similar problems in similar ways. Hopefully that team has picked a framework that is also well-suited towards the problem they're solving.
Sorry guys. I've asked questions about commercial product strategy here too and at best there's just no interest. Feel lucky nobody got hostile and flagged you like crazy.

Basically, unless you are connected to y-comb, or at least have taken millions in investment, nobody here cares.

If you do find a good forum for these sorts of questions let me know. Otherwise, try patio11. He's one of the good guys. You should email him directly.
I wrote Postman (https://github.com/zachlatta/postman) because I wanted a simple CLI mail merge utility. You can use your Gmail credentials with it.
How much information is there in 140 characters of Chinese?
Learn Machine Learning in 4 Weeks
Apart from the usual sources of old/NOS stock, they are still being produced; a new one is rather expensive though:

http://www.digikey.com/product-detail/en/CP80C88-2Z/CP80C88-...

http://www.digikey.com/product-detail/en/IP80C88/IP80C88-ND/...

There's also a military-rated version (this is probably one of the reasons why they're still in production...) which is in the $500+ range and curently not in stock: http://www.intersil.com/en/products/space-and-harsh-environm...
One could argue that it was shipped in Firefox too early. But the performance and rendering quality/completeness has improved greatly since then.

("Initially flaky software improves over time" is a common story, albeit a boring one, and bad first impressions can be hard to shift.)

I'm always happy when it fires up and saves me having to switch to an external PDF viewer.
true, some of us prefer real money (enterprise money) and some startup options (monopoly money). Go figure which one will feed you :-)
Yes, but Debian is also very widely deployed and doesn't ship with a broken Python 3 package. I'm just pointing out that your issue is specifically related to Ubuntu. You'd be better off calling your article: Ubuntu is Not A Suitable Platform for Python 3 Development, or something along those lines.
Oh, thank you for clarifying that. I hope Mozilla comes up with another but successful Labs-like thing. I'd like to see them experimenting with P2P technologies and products.
I've always heard that more people died in the 20th century than any other... Not sure if that is true or not. Never did the research.
I don't hate Australis, and I'd be surprised if that hatred is anywhere near universal, it's very Chrome-esque and people don't seem to have such a problem with that. What seems more likely is that you're hearing a vocal minority that hates it, I'd bet most people couldn't care less so long as it works.
Awesome! I already have a couple of ideas on how to use this as a teambuilding tool. Thanks for open-sourcing it!
Interesting read

http://www.npr.org/blogs/thesalt/2014/09/11/336330502/why-th...
Are your friends using late 2000s netbooks? I routinely open large PDFs (greater than 5mbs) with no problem. Firefox is very customizable if you don't like the Australis look you are free to change it. I use tree-style tabs personally. This comment is just unnecessary trolling.
Have you considered just using the open source driver?
It's probably too much to hope for a stability and performance focus for iOS 9 and OS X 10.11, but damn if I don't try.
New language automatically coordinates interactions between Web page components
Actually, this exact issue was also an issue in Debian. The bug reports can be found further down in an answer to the same stackoverflow question. It may now be fixed, I'm not sure.
That's an implicit point of using the heuristic. It's a kind of dog whistle in the context of ageism in the tech industry.
This is true for all languages, not just chinese.
In my pretty extensive tests, a long initial lease time is almost always the DHCP server's fault. I didn't see really any time wasted in DHCP REQUEST in my tests across many devices and operating systems. I think setting your DHCP server to authoritative will usually cause it to do a DHCP NACK in response to a bogus DHCP REQUEST, which prevents any delay there as observed in the article.

I measured lease time when connecting a client as "time from DHCP DISCOVER to DHCP ACK", which I found effectively represents the time between a device connecting to WiFi and being available on the network with an IP address.

With stock dnsmasq, the shortest "new connection" lease time I observed on an uncongested network was around five seconds. Almost all of the time was spent waiting for the DHCP server to respond.

With a modified dnsmasq, the shortest time to lease I observed was 20ms. That was also the longest time to lease on every platform I tested except iOS, which spends about a second trying to ICMP ping the IP address before it takes it. On iOS devices, the time to lease was almost always exactly 1s20ms the first time, and about 20ms on subsequent attempts with the same device.

You can do the same tests yourself by sitting on a wireless network with Wireshark and connecting with a device that has had the network forcibly "forgotten". Mark the first DHCP DISCOVER packet you see, and set the timestamps to relative. Filter the traffic to just show the MAC address of the router and connecting device, then look for the DHCP ACK from the router.
Here's the talk https://www.youtube.com/watch?v=skYBOXE02OQ
I'll just leave this here: http://www.pinyin.info/readings/texts/moser.html (Why Chinese is so damn hard)
The 80286 never came in a 40-pin DIP. It's impossible since the 24-bit address bus and 16-bit data bus were not multiplexed and required 40 pins. The PGA, LCC and PLCC versions all had 68 pins.
Hmm, at least in the US, the relevant sentence is: "To promote the Progress of Science and useful Arts, by securing for limited Times to Authors and Inventors the exclusive Right to their respective Writings and Discoveries."

The way I read it, the intent of latter half of the sentence clearly is to enable artists to profit from their works. Note that it does not say "all artists shall be paid no matter what". But by having exclusive rights to their works, it can work roughly like any other property in a capitalistic society: that is, artists may be able to capture rewards proportionate to the amount of the value they provide.
I agree with you wholeheartedly. I just recently started blogging exclusively on how to build dynamic without javascript framework @ http://pothibo.com

Solutions exist outside the scope of JS framework. We only need to take a minute to analyze them. It's not a popular decision to avoid JS frameworks but I believe some criticism of the current solutions available is in order.
Honestly you've got to get a tutor if you want to learn a language with any sort of speed, preferably a native speaker. With a native speaker you could shred through those books fairly quickly.

I've been studying Arabic since April and have native instructors, and at this point I can easily pick up a children's book and read it. I can make out most of the news as well.