skysight-inc/HackerNews huggingface dataset:
FIPS is bureaucratic government red tape, and nothing else. It gives the "US Department of Whatever" and their contractors someone to blame when there's a fuck up.

No one respected in cryptography that I've met, or read papers from, would stand behind it as a seal that'd mean anything in actual security (please, someone, prove me wrong: I want to see SOME light in this tunnel). There are private entities with much more sensitive information than the U.S. Government, and the ones that take it seriously easily surpass FIPS (in purpose, not paper) with good engineering, because they can't hide behind a rubber stamp.

Not too long ago, I was on a team that was required to keep a FIPS-certified (FIPS 140-2) binary blob in production for months while there were known exploits against it. If you actually care about keeping amateur algorithms and implementations out of sensitive situations (vs. "Proving You Care via Paperwork"), you'd do better to follow Google or Facebook's security blogs than FIPS, because they react faster.
No. It's similar to FBI agents selling drugs themselves for two weeks and then bust everyone buying from them.
Upgrade Your JavaScript to ES6 – Video Course
Nothing prevents you from adding annotations where they clarify things. That doesn't mean you should add them where they just clutter.
Yes, but those are all tasks which the compiler has to do when compiling source. So after a programmer has written code but before it can even run.

Really any run time could completely disregard types, it just might lead to a huge number of failure cases. These generalizations are there for us to start to get things to work.

When programming languages add features like these, especially 10 or 20 years after they were developed, they definitely feel tacked-on and if you inspect how they work, it's not pretty. If it's an interesting quirk then it might be an example to study.
Tomasz Karwatka, the Founder of Divante, Shares His Experience
>> People used to love trolls!

> No they didn't.

... Poe's law?
You're off by 1 there, there were 8 SPU's on a Cell chip, 1 was disabled to account for manufacturing defects, and another was reserved for exclusive use of the O. Leaving the developer with 6 SPU's to use.
The only difference for me is how often I need to cast types so I guess that's kind of lost on me.
How can someone who voices genuine concerns be a troll ?
I was actually interested in this framework. Right now I'm torn between pixi.js and easel.js , this seemed like a viable alternative.

But before I start to invest time in a technology, I want to know if it's still alive.

This project is definitely not finished (text rendering), far from polished (slow webgl implementation, see this thread) and has not been improved in half a year.

Take a look at this:
https://github.com/jonobr1/two.js/graphs/contributors

The whole thing was a one-man stunt and is obviously dead.

Oh, and saying "I work on the dev branch" when the dev branch is just as abandoned as the rest of the code is a blatant lie. https://github.com/jonobr1/two.js/commits/dev

Sorry, but stuff like this just makes me angry. The javascript world is full of throwaway projects that die after a few months/years. At the same time there are true gems with really elegant code. Easel, Pixi, SnapSvg, they are amazing. Advertisement for a project like this is unfair and spreads confusion.

If you need help, if you look for contributors, just say so. But don't pretend that your code is alive when it's actually cold legacy code.
A Eulogy for the Long Intimate Email
Uber Fined $7.3M by CPUC for Not Reporting CA Accessibility Data
well, language features tend to need OS/system features.
for example, trying to support dynamically loaded libraries, or leveraging multiple cores. It might not be relevant for a little toy language, but when you go to the next level, you will hit this and by then, it might be too late and you're stuck with a sub awesome choice.
While I'm sure that's the rationale, I wonder if there is a difference. If the FBI seized drugs and then continued to sell them, isn't that against the law? If the FBI seized a computer and used to to distribute child porn wouldn't that also be against the law? I can see not seizing it and allowing the original operators to continue for 2 weeks.

Does the FBI operate under different laws? For example, if I know my neighbour is hosting child porn on their computer and I wait 2 weeks to report them, probably I'm safe. If take his computer and host the files on the same machine for 2 weeks before handing it over to the police, I'm pretty sure I'd be arrested. What law is different for the FBI to be able to do that (if they did)?
5 Holistic Health Doctors Found Dead in 4 Weeks, After Run-Ins with Feds
I fully agree with your sentiment. One correction though, if you have a Google apps account, you can also use push mail, since it supports ActiveSync:

https://support.google.com/a/answer/135937?hl=en

So, when comparing paid and paid accounts, there is not a difference here.

(Of course, the GMail app gives push for all GMail accounts.)
This was the only thing stopping me moving over to FastMail, so delighted to hear this!
GM cows against global warming
GM stopped putting carburetors in vehicles in 1985 for the US market, which is 30 years ago. When can we let go of old tech?
Or even big time drug dealers:

http://www.businessinsider.com/the-us-government-and-the-sin...
NASA taps into Freelancer.com's 16M users to design tools for Robonaut 2
Maybe one day we will get half decent two factor authentication.

You can create an alternative login and put 2 factor on that, but not the master login. In theory you should never have to use the master login, and they have written pages of text justifying not having two factor on the master login, but thats not how it works in real life [0]

In real life, they require you to submit your master password to get any support. [1] .... so there I am overseas needing support and having to submit my master password over a dubious hotel connection.

They have promised real 2FA for years and years. One of these days I will ditch them for a provider who can bother supporting real 2FA.

[0] https://www.fastmail.com/help/account/2fa.html

[1] https://www.fastmail.com/html/?MSignal=Support-**
I doubt the part about last ditch publicity event. Would writing a postmortem on why you've failed really help to bring in customers? Most likely not.
Sure, that's what it comes down to. Languages with implicit type coercion do have a set of bugs not found in strongly typed languages though, but the additional safety of a strong language is -- like you say -- gained at the expense of writing casts. That does seem like a trade-off worth discussing in an article about programming language design.
Spain's Prado museum invites blind people to touch painting masterpieces
Autocorrect kills
This is fantastic news! I can finally turn off push notifications for the FastMail iOS app and just use Mail.app (I had the iOS app installed primarily just for push notifications, although I'll keep it around for the rare case when I want to use its email management features). And FWIW, I just tested (on my iOS 9 device) and it worked great.
I never said that writing a program wasn't intellectual. I said that by using a program to solve your Sudoku problem, you would not think anymore. It's like if I win at Chess but I actually don't play, I just ask a program to show me my next moves. The person who created the program used its intellect but not the ones using the program.
or ATF selling guns directly to crimina...oh, wait
Hurd is the higher level services of a micro-kernel, but uses existing kernels for the actual part in kernel space (normally GNU Mach).

So this would be replacing Mach with L4, retaining Hurd for the user space operating system components.
This sort of thing works fine. We use it for pandas all the time.
Nice. But, as usual, a bit too much emphasis on syntax and parsing - the least important part of the language. Semantics and intermediate representations are much more important. Also, not quite convinced about the choice of C vs. LLVM IR.
Android+Arsenal+-+FFmpeg-Android
The last carburetors in the US were in 1994 ISUZU trucks. [1] Some motorcycles still use them for simplicity and the last NASCAR season with carburetors was 2011.

And anyway, why are we still teaching people how a CPU without branch prediction works? When will we let go of old technologies?

[1] https://en.wikipedia.org/wiki/Carburetor#History_and_develop...
Woah many downvotes w/out explanation. Is there evidence that this study is bonk or did that comment just excite the mafia? I believe Facebook established during their IPO roadshow that they had superior CTRs.

Edit: looking over this thread, there are several rather mild comments that got strong downvotes. Looks like the followers of this thread were indeed inordinately pro-Google.
Given that Python has no tail-recursion optimisation, you really shouldn't be writing functions in this style to begin with. If you really want to though, I think there is a way to make the fixed-point combinator also mess with the function internals and make the tail-call into a loop.
Common Lisp is an example of a compiled dynamic language.
Agree, and would naturally need a new SSL cert for duskjs.com if they want to keep the encryption.
I have to say, I'm pretty disappointed by Coinbase on this one.
The GitHub repository comparison is almost a joke (why Paypal?), and the increase in transaction might actually be caused by a lot of small financial operations (speculations) rather than real increase in usage.

To be really honest, we should instead say that, despite 100s of Millions of dollars poured into the Bitcoin ecosystem, things are not taking off. There's no sign of real bitcoin adoption. Merchants using it are usually very disappointed by the sales made in Bitcoin.

Being real about what's going on is the first step to try to improve the situation.
I do not think this would be so - you would still be under the same route summary/network prefix advertised to you by your ISP's gateway :> Not everyone would get an IPv6 address like this so I do see the waste otherwise ~
Yes, WS is indeed using Java.
Kickstarter: Crystal Wash a Case of Unjust Enrichment?
the issue is not so much memory BANDWIDTH as it is an issue of memory latency on heavily branching code.
Thanks it makes sens now.
Because new way bad old way good? People adapt.
Zynga is a painter that makes every brush stroke while looking at a spreadsheet instead of the canvas. They've now been outcompeted by painters who keep one eye on the canvas and one eye on the spreadsheet. That's progress I guess.
Online stores
which is the latest womens wear collection available?
Hmm. I think I'd rather have services that disconnect/warn properly when fed invalid/other-protocol data (in a world with or without port numbers).

I really liked your reply :-)
Ask HN : Freelance job part time
Look for freelance job (part time) as software developer (javascript, java, c and c++). Thanks
What happened to Aereo was ridiculous. They tried to avoid cable regulation, the supreme court used a somewhat-shaky argument to say they looked too much like a cable company to avoid that, then another court said they don't get to use cable rules either??
I highly recommend "Engineering Explained" channel on YouTube: https://www.youtube.com/user/EngineeringExplained
Project Tango streaming to a browser
There are many readers of HN who aren't in the US and plenty of older cars around. In some countries carburetors were going into new cars after 2000.
SVG was released in 2001, and only made it natively into a browser in 2004.
Show HN: Osat – Go tool to optimize SQL
C# allows you to do implicit casts when you do not lose information, e.g. int to long. I cannot remember the last time I had to cast to something where I would potentially lose information.

However, I don't think manual casting is a cost at all - it's more of a guide telling you something in the design is wrong, or a reminder to make a comment of why you do it. And for any long maintanence projects, you want to catch all the bugs you can as early as you can.
blink { animation: blink 1s steps(1) infinite; }
@keyframes blink { 50% { color: transparent; } }

Then just use it. It’s non-standard, but I’m sure you don’t mind.
Nice theory. Fly in the ointment: Our ancestors didn't stop asking, quite obviously, given that we ended up here.
While technically true, this diagnosis is a bit misleading.

The question is "Why is Flash so vulnerable?" and the part of Patio's answer is "codebase in a non-memory-managed language." Well, practically everything we seriously use has the codebase in a non-memory-managed language.

All the common operating system guts -- written in a non-memory-managed language. All the common browsers guts -- written in a non-memory-managed language. Even the guts of the "memory managed languages" are -- written in a non-memory-managed language.

C and variations, and not memory managed. And nobody managed to replace C and dialects with something else. The Rust language will maybe manage to be used for something serious, already implementing the experimental layout engine but at the moment it's still too hard even to replace the current Firefox engine with the one written in Rust. It's a good thing that Rust and other developments exists, but in practice, C is still everywhere.

So Flash is not an exception in being written in C or the dialect of it. That some parts of some systems can be implemented in memory-managed languages is a very old thing, and it doesn't protect them from exploits. Parts of Firefox are written in JavaScript. Even when something is written in Java (which is memory-managed) didn't mean a thing, as recently Java code was the favorite attack vector (in spite of being "virtual" and "memory managed").

Security is hard. Certainly, millions of dollars of security research and the implementation of their results help the most, more than "it's not memory managed" as it is too simple an answer to be of much use in the given context.

So why then Flash? Because of many things, but specifically Flash brought to the browsers huge functionality which is still slowly being reimplemented in the form of the standard features of the browsers. Even ignoring the fact that they brought these features without too much external reviews, the only way to bring so much functionality to the huge infrastructures that existing browsers are was for Flash to cross a lot of boundaries. And the attacks are the boundary crossings, so piggybacking on what Flash does is often the best thing for an attacker to do. Then, the second cause is certainly that Flash codebase definitely didn't receive enough attention to become safer. And the current reason is -- even Adobe doesn't expect Flash to ever become something worth of too much investment.

Disclaimer: I've implemented one memory managed language in C. Behind almost every language mentioned anywhere is some non-memory-managed C. Simple "a single island" languages can be very clean and safe. Add the features, use of the system libraries, boundary crossings etc, and "memory managed" is just a small point.
>Someone picks a name and they 'own' that.

IIRC, there was an interesting study of decentralising git, that suggested an application of bitcoin's system for deciding who "owned" a name.
Uber coming at them should be incentive enough. People speaking favourably of Uber and less so of taxis should be incentive enough.

The entrenched always spend more on a gradually weakening defence of their turf than they do on improving or going on the attack. Mainstream news (newspapers, etc) are the same.

I feel for the guys who bought the medallions but are somehow pinned under a brand or group that won't innovate. The investment in the medallion prevents them from just driving for Uber, but the actions of those up the chain doesn't improve their situation at all.

Stupid thing is that so many of the things they could/should have done wouldn't have been obscenely expensive.
Submit a patch or go away if you have a problem. The world doesn't owe you free software.
Steam OS Went to Debian Because Ubuntu's IP Policy Created Legal Uncertaintiy
I implemented a solver in Common Lisp, quite a while back. The repo:https://github.com/dmsurti/sudoku and some details here: http://www.deepaksurti.com/blog/my-attempt-to-solve-sudoku.

I was learning algorithms then and a sudoku solver was both fun and a good learning exercise.
> If you're worried about slippery slope, then maybe just relax a bit and recognise what type of behaviour they want to prevent on their site. Or find somewhere else to have your discussions.

Or, y'know, talk about it, try and get reddit to give a clear policy so that the slippery slope stops and it's very concrete what is allowed and what isn't? Like people are doing?
> Reddit is the Internet.

That's an insane thing to say. I know she's the former CEO but anybody saying this is losing perspective. There are countless communities not on Reddit and they can't be represented by Reddit. I know it's probably a conscious exaggeration but it's getting hard to tell, people take this forum shit so seriously.
I don't disagree about the adoption / number of transactions statistics.

But the github metrics might have some value - basically this is an attempt at analyzing the adoption of 'programmable cash', and in that sense Paypal is one good example of a set of APIs that can be used to create dynamic payment flows that weren't (easily) possible in a global way previously.

Given that angle though, perhaps it would be more interesting to compare the usage of Stripe libraries on github - which is arguably in the same space (and achieving results by abstracting the existing, well-adopted financial systems, rather than replacing them).
It can't play sound either. Nor can it send or receive email. That still doesn't mean it's not complete.
Yep, fair enough. I was mixing my arguments I guess.
Some people find it uncomfortable and scary whenever anyone disagrees with them. Or will claim to. And if free speech doesn't include the right to say things that other people disagree with then it's meaningless.
A company that employees cheap programmers.
How I Did It: Blockbuster’s Former CEO on Sparring with an Activist Shareholder
>C++ gave the programmer tight control over everything that's happening.

I think of it more that C++ decoupled all the knowledge that was required to do things (which C previously required), and thus the purpose of making C++ "easier to use" for new developers maybe did accomplish some sort of goal in that direction.

But I say that as a C developer who has witnessed the world go mad. It is of course, all C's fault, but the fact that we're still using it, somewhere, under it all, is some sort of victory.

C++ "decoupled things" because you no longer needed to actually read code to trust that it was going to work the way it said it was going to work, which is something you do in C (i.e. read all code) .. as well as other languages of course. Well, if you have the ethos of "read all code", no matter the language, there are some where that is easy to do, and others where its a bit of a drag.

(Mostly, its the languages that have IDE support, or which attract insufficiently brain-dead people that they can actually use EMACS to get around.)

If all you have is a simple editor, though, there are some languages that truly shine, and C is thankfully still one of them.
Continuous Web Security Testing Service “VAddy” Announces Premium Plans
> Analog and "non-exact" computation is not something that sounds very useful.

Floating point operations are non exact in general. Physics simulations work at various degrees of approximation. Non exact computations would be useful as long as we can quantify the "non-exactness".
Oops, a fresh ff install fixes it. Sorry.
ClearTax Is Hiring Engineers, PMs in Bangalore, India
ClearTax ( www.cleartax.in ) is in the unique position to shape the future of India's financial software. We are India's number 1 tax filing website.
We are also the first India focused product company YC has funded.

https://cleartax.in/meta/careers

Software and experiences designed by us will determine how Indians e-File, save on their taxes, invest and lead simplified financial lives.

Most financial software in our country is from the 80s and stuck in legacy. Most people today have powerful smartphones in their pockets and their lives are better because of apps like WhatsApp, Google Maps, Truecaller, etc.

Simple and intuitive financial tools for taxes, accounting, payroll, invoicing, investing do not exist for the mobile in our country today. We want to change this.

We are hiring:

* Front end Engineers.
* Full stack engineers.
* Android engineers.
* Generalist programmers.
* Back end engineers.

We are also hiring
* Product Managers.

Email: careers@cleartax.in if you are interested.

We use Functional programming on the backend :)

We'll relocate you from anywhere in the world to India. We are building a great company that is transforming how Indians approach their finances.

Come join us.
> it's much harder to implement a compiled version of a dynamic language

No it is not. All major dynamic languages can be compiled usually JIT. Every major browser has a JIT compiler for Javascript. Python, Ruby, and Lua have JIT-compiled forks/reimplementations.

The difference of JIT vs ahead-of-time compilation is irrelevant for the high level of the article.
Yeah, that never made sense to me. How do you claim they're too much like a cable company (thus declaring them one), but not allowing them their rights as one?

The Judges who ruled in favor of that should have been investigated for corruption. It made zero sense, and in my opinion, failed the "follow the money" test.
As is JavaScript
Yeah, I know that, you need to tell everybody else

I'd rather have Norvig's code solving some IA problem than some perfectly compliant PEP-8 code solving an issue in a naive way
Top WordPress SEO Tips
LinkedIn's “gut-wrenching” cost of doing business in China
Regardless of comparison to things like PayPal and stripe, bitcoin-related repos definitely follow an exponential curve up and to the right. Until that peaks, I don't see how that kind of growth in developer interest can be seen as a bad or disappointing thing.
I thought push is a standardized imap extension and any capable client can use it, if the server is configured properly. Does push on iOS require apple to somehow allow you to use it with your provider, or why is it such a big deal?
>What's better for the brain, solving Sudokus, or writing a Sudoku solver?

Both can be good. Chances are that your first Sudoku solver uses some bruteforce approach, while your manual solution certainly does not. Then the intuitions that you get from many manual games can drive the design of your solver. Of course you can implement some established algorithm but I don't see that challenging.

I have mathematician friend who won't ever play Nine Men's Morris because it's a solved game, so it's not longer interesting for him. It's a shame, you can learn a lot even playing Nim variants if you don't already know the winning strategy, it's a good learning material for kids too.
Apple, Samsung in talks with telecom groups to launch e-Sim card
Robot Passes Self-Awareness Test (VIDEO) / Sputnik International