Slashdot Mirror

Chrome can't dictate browser standards.

Not completely true. See the autocomplete="new-password" solution to prevent Chrome from auto-filling passwords. If have a create user form that Chrome keeps filling with my current credentials (username & password)

Yes because everybody knows he could have used a regular expression.

Tesla is a member of MISRA (Motor Industry Software Reliability Association).

MISRA prohibits unions.

MISRA: Unions shall not be used.

There is a discussion on Stackoverflow about the rationale for this restriction, and also some permitted exceptions to the rule.

While C is faster in some cases, java is faster in other cases starting with Android 6.0.

As a falsehood this is fairly outrageous. Real benchmarks are available here.

Java must be considered good in its niche. Despite that, it's apparently necessary for you and others to write apologetics for it. As a language, it's verbose and unlovely. Worse than that, it's boring. Which of course makes it all the more suited for its purpose: most applications are boring. Boring code does what it's supposed to do in ways that are easy to understand.

Programming has two inheritances. The first is the theoretical foundation, stemming from the lambda calculus and that Turing guy. The second inheritance is that of the circuit and the capacitor: the actual mechanics of slinging bits around. It's probably fair enough to suggest that languages tend to favor either performance and bit-slinging or functional purity. Java occupies an uncomfortable niche in the sense that it is very much on the performance side of things rather than the functional, and yet it consistently falls short of C, and for that matter Rust and Erlang seem to stack up pretty well.

To borrow from Alan Perlis, "A language that doesn't affect the way you think about programming, is not worth knowing." Java may even be the perfect language of its category. It never goes on any adventures or does anything unexpected, and its performance is just fine, thank you. But you'll pardon me if I prefer

(1...1000).select { |i| !!(i%5) || !!(i%3) }.reduce(&:+)

to

public static void main(String[] args) {
    int sum = 0;
    for (int i = 3; i < 1000; i++) {
        if (i % 3 == 0 || i % 5 == 0) {
            sum += i;
        }
    }
    System.out.println(sum);
}

Java borrowed from stack overflow

So the module must conform to these requirements then?

http://stackoverflow.com/questions/12473480/how-should-i-escape-commas-and-speech-marks-in-csv-files-so-they-work-in-excel

Seems a little half-assed creimer. I don't think mixing HTML with Excel's arbitrary CSV rules makes for a very portable or useful file format. If you're going to go all-out with HTML then you should simply encode your commas as HTML entities, though it leaves the dangling problem of how to handle the quotation marks, plus I doubt Excel plays nice with them. Since the quotation marks are optional for CSV files, it is certainly possible to omit them.

Anyway, this thread has gone on long enough over such a trifling thing, good luck keeping control over your file.

Besides, Stack Overflow agrees with me that HTML, despite the "L", is NOT a Programming Language (pretty much for the reasons I was thinking).

http://stackoverflow.com/quest...

Eric Lippert, a former Microsoft employee and one of the main designers of the C# language and someone who understands and appreciates functional programming (having brought many functional paradigms to C# such as lambdas etc.) responded to the question "Why hasn't functional programming taken over yet?" on StackOverflow, which for me, sums up everything I feel about functional programming.

I've quoted Eric's answer below, but the TL;DR is that I believe the future is neither purely functional, nor purely OO, but some hybrid of the two.

Because all those advantages are also disadvantages.

Stateless programs; No side effects
Real-world programs are all about side effects and mutation. When the user presses a button it's because they want something to happen. When they type in something, they want that state to replace whatever state used to be there. When Jane Smith in accounting gets married and changes her name to Jane Jones, the database backing the business process that prints her paycheque had better be all about handling that sort of mutation. When you fire the machine gun at the alien, most people do not mentally model that as the construction of a new alien with fewer hit points; they model that as a mutation of an existing alien's properties.

When the programming language concepts fundamentally work against the domain being modelled, it's hard to justify using that language.

Concurrency; Plays extremely nice with the rising multi-core technology
The problem is just pushed around. With immutable data structures you have cheap thread safety at the cost of possibly working with stale data. With mutable data structures you have the benefit of always working on fresh data at the cost of having to write complicated logic to keep the data consistent. It's not like one of those is obviously better than the other.

Programs are usually shorter and in some cases easier to read
Except in the cases where they are longer and harder to read. Learning how to read programs written in a functional style is a difficult skill; people seem to be much better at conceiving of programs as a series of steps to be followed, like a recipe, rather than as a series of calculations to be carried out.

Productivity goes up (example: Erlang)
Productivity has to go up a lot in order to justify the massive expense of hiring programmers who know how to program in a functional style.

And remember, you don't want to throw away a working system; most programmers are not building new systems from scratch, but rather maintaining existing systems, most of which were built in non-functional languages. Imagine trying to justify that to shareholders. Why did you scrap your existing working payroll system to build a new one at the cost of millions of dollars? "Because functional programming is awesome" is unlikely to delight the shareholders.

Imperative programming is a very old paradigm (as far as I know) and possibly not suitable for the 21th century
Functional programming is very old too. I don't see how the age of the concept is relevant.

Don't get me wrong. I love functional programming, I joined this team because I wanted to help bring concepts from functional programming into C#, and I think that programming in an immutable style is the way of the future. But there are enormous costs to programming in a functional style that can't simply be wished away. The shift towards a more functional style is going to happen slowly and gradually over a period of decades. And that's what it will be: a shift towards a more functional style, not a wholesale embracing of the purity and beauty of Haskell and the abandoning of C++.

I build compilers for a living and we are definitely embracing a functional style for the next generation of compiler tools. That's because functional programming is fundamentally a good match for the sorts of problems we face. Our problems are all about taking in raw information -- string

Java8 for Scala is like a needle compared to a sword. If you want a needle...

I've been using java this year, but it was C#/c++ mostly previously. The biggest things I want are:

1. pass by reference (yah, probably not happening, but if I can choose only one, I'd take it.)
2. output variables. Sometimes you don't want to make yet another class/struct/etc.
3. get/set shortcuts are kind of nice, and more compact.

Of course a google search pointed out; link
which basically just uses generics to get around 1 and 2. It is not as compact thought and I suspect the additional overhead may be significant in some cases, though for configuration time and such, by all means, go for readability and if nothing else remember that there is likely a json parser for every language in existence.

char * function(char * jsonString);
String function(String jsonString);
string function(string jsonString);

I glanced at scala, and didn't see by ref or output. I suppose another bug about java is by default it seems to limit the ram it grabs onto. I've seen trivial xml parsing code blow up for big files where C# just worked. Likely I can fix that, but it is still annoying.

Android isn't really Linux. Yes, buried in there somewhere is a Linux kernel

It uses the Linux kernel but is not really "Linux" seems to be some arbitrary constraint you have invented. Maybe my original post lacked context: my sister is a non-techy. I was never expecting her to use GNU tools, etc. . .

but the kernel is not the operating system.

You seem so confident, yet not everyone seems to agree with you.

I am sure that if Chrome OS took over you would have a reason to say why THAT is not really Linux. Such is the world through the eyes of a pedant. Meanwhile, the rest of us will be able to appreciate the underlying point that Open Source and its flag ship project (Linux) is having an impact we could not even dream of a decade or so ago.

Why are you encrypting traffic within your own private network?

To avoid loss of functionality once the Fullscreen API becomes limited to secure contexts. Browsers no longer support sensitive JavaScript APIs over cleartext HTTP. There are plans to make Fullscreen API unavailable over cleartext HTTP because of demonstrated phishing attacks. Without the Fullscreen API, streaming video from a home NAS will be limited to a window.

"What is the Liskov substitution principle?"

I didn't know what it was until I looked it up in the article. So basically you want me to remember that some guy came up with a name for using inheritance and if I don't remember it I'm a bad programmer?

Test to see how the person will fit into your team because no matter how great they are if they disrupt how the team works. Then for programming skill and then for things like remembering the exact definition of terms that they could use Google to get.

I hire C++ developers. I give a simple coding test to all applicants. 95% of all coders fail even the simplest of tests. There's a reason that trivial tests like FizzBuzz are used during programmer interviews. That's because most "programmers" are utter crap. They don't know their tools. They don't know the language that the program in. They don't stay up-to-date. They cannot reason about problems. 95% can't do the simplest of problems. You have to really deep before you find people who can talk about design principles, design by contract, etc.

"Tell me what a class invariant is."

Blank stare.

"What is the Liskov substitution principle?"

Deer in headlights.

Thank you for your time.

I work in the financial industry. We pay shit-tons of money if you know how to engineer software. But even here the talent pool is miserable.

I think that has something to do with browser publishers deprecating the Fullscreen API on cleartext HTTP sites to make it harder for a man in the middle to impersonate your device's operating system. (Search keyword "secure contexts".). Do the pages an where embedded YouTube video falls to go full screen use HTTPS or cleartext HTTP?

> FMA instructions are Fused Multiply Add, whatever the fuck that is.

Really? You're posting on /. and you can't google it?

* Multiply-Accumulate

This commonly shows up when you are lerping (linear interpolating) between two values, a and b, you have a interpolation parameter usually called t:

x = a + (b-a)*t

Compilers will see this pattern and generate a FMA instruction for it, or you can write your own.

Copying the code snippet from this StackOverflow Question: How to use Fused Multiply-Add (FMA) instructions with SSE/AVX

float mul_add(float a, float b, float c) {
    return a*b + c;
}
 
__m256 mul_addv(__m256 a, __m256 b, __m256 c) {
    return _mm256_add_ps(_mm256_mul_ps(a, b), c);
}

The compiler will emit this instruction:

vfmadd

/voice = "Nick Burns"
Now, was that so hard?

But I guess it's easier to bitch about not understanding something then ask for help.

Most popular among "being used in development" are Javascript, Java, C# and PHP according to stackoverflow tags.

Same AC here, I don't actually understand all of the notation in the link you gave as it is displaying here, I'll have to look it up.

The Unicode on that page is borked. There is a really good discussion on this Stackoverflow page including Chudonovsky's method.

But each iteration of that looks like quite a bit of calculation too.

You could do a few iterations of Chudnovsky in a week. A quadrillion iterations of Taylor's series would take a thousand lifetimes.

I thought Progressive Web Apps could access device functionality, such as the camera, microphone, location, orientation, etc. Or is Apple deliberately withholding device functionality from JavaScript? To which particular "functionality not available to a browser" are you referring?

GPUs are still seeing notable performance increases because the problems you solve with a GPU are embarrassingly parallel. CPU progress has largely stalled because it's hard to get additional per-thread performance without clocking higher; the low-lying instruction level parallelism fruit is all gone. And the physics of the situation doesn't allow continuing to scale clock speeds the way they scaled from 1994-2002.

There are design related gains we know could be achieved without any new materials. In particular, clockless processors could be a huge jump forward. But designing a clockless processor is extremely difficult. A lot of the methods, tools, and engineering that has been developed over the last 50+ years to allow a relatively small team of people to manage the complexity of billions of transistors simply don't apply any more when you're dealing with a clockless processor.

And obviously watch HOW they get to their solution, ie. not by connecting to a chatroom where they have a bunch of friends waiting to help out. Looking up snippets, checking parameters and syntax etc. would obviously be fine, that's what you'll be doing in daily work anyway.

What do you have against Stack Overflow?

Completely agree - if you are just starting to use git, and you don't have a git rock star handy (guy next cubicle over that noisily snorts Cheetos all morning), and you don't have access to Stack Overflow, just quit now.

There's a reason this SA answer has been upvoted 13,182 times.

This SO answer is a pretty good attempt at explaining it:

https://stackoverflow.com/ques...

LaTeX is not a programming language, right?

It has been used to write some interesting applications, according to Stack Overflow. It is, apparently, a programming language, although one I'm not going to use for weekend projects not involving text formatting.

Wasn't Java open source at some point? And besides why is anybody using it now? (Here's looking at you Libre/OpenOffice) Rewrite Android in C, or better, Assembly, and the problem is solved.

Wikipedia's entry, has this to say as intro:

OpenJDK (Open Java Development Kit) is a free and open source implementation of the Java Platform, Standard Edition (Java SE).[1] It is the result of an effort Sun Microsystems began in 2006. The implementation is licensed under the GNU General Public License (GNU GPL) version 2 with a linking exception. Were it not for the GPL linking exception, components that linked to the Java class library would be subject to the terms of the GPL license. OpenJDK is the official reference implementation of Java SE since version 7

There is a post here on StackOverflow on this: http://stackoverflow.com/quest...

My cynical side feels whatever the reality is, this is Oracle and well lets just say that I haven't ever felt Oracle to be a community player, unless that involves providing consults at cost.

MySQL will not allow table names to be passed in as parameters to a stored procedure [1] [2] [3]. Without eval, there is no way to dynamically use a stored procedure to operate over multiple, different, tables without enumerating all the tables. The code needed for the "safe" approach is massively bigger, n * m, where m is the body of your stored procedure and n is the set of tables you want to operate over. It also requires such a massive degree of code duplication to make it significantly less safe.

We have a reporting system called MyDBR that requires everything to be done in MySQL or JavaScript. Likely, a stored procedure isn't the best answer for my problems, but it's better than JavaScript. Probably the "safest" answer is to throw away MyDBR and use an actual programming environment to accomplish what I'd like (sane reporting.)

The entire premise of this article seems odd to me. Who would forget these techniques, unless they never really learned them in the first place? And why would the author want to revisit them? I think because it was a slow news day.

MySQL will not allow table names to be passed in as parameters to a stored procedure [1] [2] [3]. Without eval, there is no way to dynamically use a stored procedure to operate over multiple, different, tables without enumerating all the tables. The code needed for the "safe" approach is massively bigger, n * m, where m is the body of your stored procedure and n is the set of tables you want to operate over. It also requires such a massive degree of code duplication to make it significantly less safe.

We have a reporting system called MyDBR that requires everything to be done in MySQL or JavaScript. Likely, a stored procedure isn't the best answer for my problems, but it's better than JavaScript. Probably the "safest" answer is to throw away MyDBR and use an actual programming environment to accomplish what I'd like (sane reporting.)

The entire premise of this article seems odd to me. Who would forget these techniques, unless they never really learned them in the first place? And why would the author want to revisit them? I think because it was a slow news day.

Interesting. Did not know about the lack of a switch in Python.
This is interesting: http://stackoverflow.com/quest...

Basically, a compiler is a transformation from one set of code to another — from source to IR, from IR to optimized IR, from IR to assembly, etc. This is precisely the sort of thing functional languages are designed for — a pure function is just a transformation from one thing to another. Imperative functions don't have this quality. Although you can write this kind of code in an imperative language, functional languages are specialized for it.

Scott Meyers calls this the The Keyhole Problem and has a paper with a bunch of good examples.

My "favorite" modern example of the problem is Chrome's omnibox auto-completion, you get six results at maximum, they don't even give you a scroll bar or a "Show more" link, six results only. There used to be a command line option to increase it, but they removed it some years ago, it's now a hardcoded constant in the source code.

Here's a discussion on StackOverflow about it.

Linux systems both of which were written with mostly C++

Linux is written in C.

In appearance, yes, but they rely on all kind of compiler extension to really use an object-oriented C, for example __typeof__() to mimic templates. It's also full of function pointers, overload, inheritance, etc.

Linux systems both of which were written with mostly C++

Linux is written in C.

Did you make any effort at all to find out? I googled "swift copy on write threads", and this is the second hit.

TL;DR: they work fine with threads.

Does it support SOAP with MTOM multipart-mime wrapping? No?

Here's a nickel, kid. Buy yourself a real language.

Syntactic whitespace makes me twitch, too; but it neatly resolves many of the codestyle hubbub issues you see in other language environments.

Well, it could have, by being more strict, but no.

This post will be hugely unpopular to the point of me being called stupid or moronic, but I'm gonna spell it out anyways.

Even today HTML5 is nowhere near feature complete, fast and reliable as Adobe Flash is. In many ways ActionScript is better than JavaScript. Adobe Flash has powerful tools of dealing with streaming video/audio (including realtime bandwidth tuning), fast forwarding/rewinding and setting various video attributes. It's a lot easier to create complete solutions using Adobe Flash than to create a mishmash of SVGs, JavaScript, HTML, CSS and media. Adobe Flash just plays video/audio formats it's intended to play, vs. the dreaded HTML5 message, "Your browser doesn't support this media type" specially on platforms other than Windows. Adobe Flash, at least on Windows, seamlessly accelerates video decoding and rendering vs for instance royalty free VP9 codec which drains your battery several times faster because it's decoded using only the CPU.

I have yet to see a library of rich content HTML5 games vs. literally thousands of Adobe Flash games which could be run on ancient hardware vs. modern web browsers which require at least a gig of RAM and a fast multicore CPU to render HTML5 demos.

Adobe Flash has always been awful in regard to security but for what it's worth it's still indispensable.

My Android developer take on this same story:

It is Tesla's fault. Why?

They decide which target sdk and which min sdk version they support (compile sdk doesn't really matter for liability purposes). They should be aware of the consequences of supporting older versions. If they use a feature that is vulnerable in one of the versions they support, it's CLEARLY their fault ;-)

This reminds me of a question I once answered - someone wanted to store passwords on Android's SharedPreferences for "remember password" feature. Someone told them to use SharedPreferences. I replied stating SharedPreferences can be seen in cleartext if the an app is using root to poll the filesystem (SharedPreferences' defense is nothing more than storing them in filesystem encrypted files, which # simply bypasses). Whose fault is it that a phone is rooted/rootable or that the app escalated by itself? Doesn't matter. These are clear case of snowball growing, but in practice, if you're using a feature of an API for which you can see the source (because you can, it's AOSP...), you're always to blame for the dangers you put on your software. I learned that the soft way, and so did Tesla - they better prevent the hard way from happening with a quick fix. As they probably are storing the token in a SharedPref, the secure-preferences lib probably solves their problem or heavily mitigates attacks.

My Android developer take on this same story:

It is Tesla's fault. Why?

They decide which target sdk and which min sdk version they support (compile sdk doesn't really matter for liability purposes). They should be aware of the consequences of supporting older versions. If they use a feature that is vulnerable in one of the versions they support, it's CLEARLY their fault ;-)

This reminds me of a question I once answered - someone wanted to store passwords on Android's SharedPreferences for "remember password" feature. Someone told them to use SharedPreferences. I replied stating SharedPreferences can be seen in cleartext if the an app is using root to poll the filesystem (SharedPreferences' defense is nothing more than storing them in filesystem encrypted files, which # simply bypasses). Whose fault is it that a phone is rooted/rootable or that the app escalated by itself? Doesn't matter. These are clear case of snowball growing, but in practice, if you're using a feature of an API for which you can see the source (because you can, it's AOSP...), you're always to blame for the dangers you put on your software. I learned that the soft way, and so did Tesla - they better prevent the hard way from happening with a quick fix. As they probably are storing the token in a SharedPref, the secure-preferences lib probably solves their problem or heavily mitigates attacks.

Before I answer that, answer this to yourself: if it's available, do you have any plans to review the code yourself or check to see if others have, or is this just a case where you'll feel safer knowing the code is available, even though you have no intention of verifying that the feeling has a basis in reality?

I feel compelled to ask that up front, because if you were actually concerned about whether your password manager's code was trustworthy or whatnot, you'd already know that browser extensions are just packages of web standard files located in the extensions folder for your browser (e.g. instructions for finding Chrome extensions on your system). That's just as true for whatever your current password manager is as it is for this one. It's fine that you didn't know that, but hopefully it tells you something about what you're actually trusting for your security.

If you're never going to verify that the code is what it claims to be, then having it available isn't doing you any good, other than providing some warm fuzzy feelings. That's a trap that most of us fall into, myself included, and it's something that we as a community need to be shaking each other out of.

uhuh,
i thought about the same when i saw this , like
curl the cruel
but what im really wondering is why bother spliiting a search up into two's instead of one single optimized ... far be it from me to challenge the tek-savvy of the 1e100 but i dont know it seems
i dunno ... sure there will be reasons ... sounds like discrimination to me if you ask me, probably a good reason for money hungry EU and US officials to suit up and law them with a court of tax or something

http://stackoverflow.com/quest...

PS : Just joking, thanks for the books!

This is about "ahead of time" compilation, otherwise known as "compilation", which third-party tools have done forever. Linking to C in Java is its own world, and I don't know how practical C++ is.

It's dead easy to bridge between C++ and C# at runtime using Managed C++ (or whatever they call it these days). The C# marshaller, the built-in way to get C objects from C# code, is slow painful garbage that no one should use, but it's easy to do the conversion in C++ and either object conversion or using objects directly is very fast that way.

You can compile C# to a proper EXE or DLLs easily enough and it will happily load C/C++ DLLs. The reverse is a bitch though - I've heard it's possible (the .NET runtime is also just DLLs), but I never got it to work properly.

You can (awkwardly) run C code from Java, including loading DLLs, but I've never heard it's possible to do the reverse. What can C code do with a JAR?

Linking all three would be a bragworthy project, but I think Java is just missing the key concept here.

> SQL is not a programming language.

Yes it is.

It's a declarative special-pupose programming language, and some variants are Turing-complete:

http://stackoverflow.com/questions/900055/is-sql-or-even-tsql-turing-complete

There are people working on this sort of thing, but last I checked it's still in its infancy.
Some interesting discussion to start the reader off on on stackoverflow

Amongst developers - 20%

Of course, developers are a very influential set. If, for example, a developer writes an app using Electron because it works well on both Linux AND Windows... it works well on Linux.

Most interesting. OSX is only 20% and equal to Linux on the desktop and windows in total makes up the other 60%? Seems very windows biased, and I'd question that based on the places I've been and the people I see using macs. I have seen lots of devs using linux in a vm, on a mac, but not as a desktop. I personally have used Linux as a desktop on multiple systems, it's serviceable, but not as straightforward as it could be. I keep going back to OSX instead. For my servers I run all linux however.

I have also used MS's toolchain, and it sucks pretty badly IMNSHO. I also have numerous dev friends, some who were exclusively Windows up until Win10's release. They have all moved to OSX and Linux and those development tool chains, and now can't believe they ever loved MS. Ignorance is bliss, I suppose. There is a reason MS is losing the server marketplace, all those parking websites be damned.

On desktop - 1.5%

Amongst developers - 20%

Of course, developers are a very influential set. If, for example, a developer writes an app using Electron because it works well on both Linux AND Windows... it works well on Linux. And software that works well on Linux makes it an attractive platform.

MS knows the best way to keep useful software exclusively on their platform is to get developers hooked on their toolchain.

> The icon tells you the extension type.

Uhmmm... not always. If someone is malicious enough to write/deploy malware, they're malicious enough to tamper with the program icon. And, yes, you can edit/replace the default icon of a program http://stackoverflow.com/quest... The developer is asking on stackoverflow about getting a custom icon to display on the executable. Sticking in a "textfile" or "pdf" icon into an exe file is relatively easy.

But really, if you've been using Excel that extensively, haven't you learned its quirks by now?

1. If entering text data, select the whole column and set its type. Or type a single quote (') before each text value.

2. If importing a CSV file, just make sure each text value in the file is ended with a tab (ASCII 9) character.

Funny you should mention the Stackoverflow survey, according to that Mac OS X actually gained quite a lot on Linux compared to previous years and is now at 26.2%.

http://stackoverflow.com/resea...

Linux didn't lose percentages, instead it stayed mostly the same and in fact gained a little bit. The only loser is windows.

E.g., testing ports in powershell https://thesurlyadmin.com/2013...
E.g., updating AD from spreadsheets http://stackoverflow.com/quest...

Do you expect that to work in Powershell running on a Linux system?

Powershell has a very steep learning curve and IMHO lacks the end-user history of traditional unix shells.

That said... doing things like having most of your OS exposed through objects for inspection and manipulation, even cells in spreadsheets or network resources has value.

• E.g., testing ports in powershell https://thesurlyadmin.com/2013/04/04/using-powershell-as-a-telnet-client/
• E.g., updating AD from spreadsheets http://stackoverflow.com/questions/20479981/update-active-directory-from-spreadsheet

You *could* do this in bash with /dev/tcp/whatever, perl, sed, python and possibly an ldap client, but the exposed methods in powershell are more stable, have fewer dependencies and are easier to understand.

The fact that it's so hard to do simple things makes it very difficult to add to your knowledge without reading a few books or taking some course on the subject, then using it daily in Windows admin work.

I always wish I knew more about using it, but... unless you're deep in this stuff, it's better to skim the capabilities and let the Windows admins figure out the details.