News for hackers. Stuff that matters.

cogs

Ask HN: Might complex software have infinitely many vulnerabilities?

Vulnerabilities continue to be found in long standing software. Is it possible that we just keep finding vulnerabilities as we throw more compute at finding them? Maybe there’s no such thing as secure? I’m concerned for future of the internet, and IT generally, if bad actor abilities are limited only by compute.

( Read More... | 2 comments | on HN )
Simple use case: What version of the json module is this live code running? (when you don't even know the attribute name)

# At a pdb prompt, from a frame where json is global or local:

  (Pdb) import pobshell; pobshell.shell()

  Welcome to Pobshell - type 'help' for commands, 'quit' to exit 
  / ▶ find json --name *version* -i -a -l
  /json/__version__  str                       '2.0.9'                                                  
  /json/codecs/sys/api_version  int                       1013                                           
  /json/codecs/sys/hexversion  int                       51055600                                       
  /json/codecs/sys/version  str                       '3.11.11 | packaged by  

  # -i case insensitive
  # -a include hidden attributes (_ and __ prefixed names)
  # -l give an 'ls -l' listing of the matched objects

Show HN: Pobshell: A Bash-like shell to explore live Python object hierarchies

https://github.com/pdalloz/pobshell

Meet Pobshell. Think cd, ls, cat, and find — but for Python objects instead of files.Stroll around your code, runtime state, and data structures. Inspect everything: modules, classes, live objects. Plus recursive search and CLI integration.40s video demo: https://www.youtube.com/watch?v=_d4DgVnqWjQWhat it's for:- Exploratory debugging: Inspect live object state on the fly- Understanding APIs:...

( Read More... | 1 comment | on HN )
Clickable links for convenience:

* 2 min demo: https://www.youtube.com/watch?v=I5QoSrc_E_A

* PyPI: https://pypi.org/project/pobshell/

* GitHub: https://github.com/pdalloz/pobshell

Note: This is an alpha release. Built and tested with Python 3.12 on MacOS, Ubuntu, Windows (native + WSL).

I’m especially curious to hear how devs use this: — Exploring packages? — Debugging data state? — Teaching Python? — Something unexpected?

Any feedback is appreciated!

Show HN: Pobshell – A Bash‑like shell for live Python objects

https://github.com/pdalloz/pobshell

Hi HN,I've just launched Pobshell. Think cd, ls, cat, and find — but for Python objects instead of files.Stroll around your code, runtime state, and data structures. Inspect everything: modules, classes, live objects. Plus recursive search and CLI integration.What it's for:- Exploratory debugging: Inspect live object state on the fly- Understanding APIs: Examine code, docstrings, class trees-...

( Read More... | 1 comment | 3 points | on HN )
But how many citizens know calculus, literature and physics? Certainly not enough know history - or US democracy wouldn't be facing the threat it does now.

The poorly educated need a livelihood too. If the economy is healthier for global trade (I think it is), then some way must be found of destributing its benefits to the demographics who got hit. Otherwise you get revolution or populism.

Telling an unemployed factory worker to send their kids to college doesn't help. Doesn't help the factory worker, and doesn't help kids who see education and middle class jobs as about as unreal as the idea of becoming a famous influencer or kingpin drug dealer.

Re:The End of the Subscription Era Is Coming on Saturday September 09, 2023 @05:21PM (#37450412)
As an aside: Hardware as a service is annoying and feels horrible, but is probably the only way to achieve the long lifetimes we need for consumer goods in a world where reviews are unreliable and we need to stop wasting resources on planned obsolescence.
Re:The search for extraterrestrial life as we don’t know it on Friday February 03, 2023 @02:18AM (#34638133)
We managed to recognise stromatolites https://en.wikipedia.org/wiki/Stromatolite
Re:Holding a mirror to life’s key molecules on Friday August 06, 2021 @04:30AM (#28084582)
I wonder if the fact that DNA & RNA only occur with one chirality tells us something about how frequently this step occurs in the Drake equation. If the step from non biological organic molecules to RNA & DNA happens often, wouldn't we expect L-DNA and L-RNA to appear in nature?
Re:There are no results for tank man on Friday June 04, 2021 @02:17PM (#27396964)
Even searching for tank woman or tank cat returns results!
Attribution is not from tracing connections or domain ownership, it's from looking at the coding style, the "Tactics, Techniques and Procedures" and the choice of targets.
Re:Ask HN: What's to stop Russia pulling the plug? on Friday December 18, 2020 @08:37PM (#25474177)
There's surely a lot of bespoke software in those core Govt systems. So they'll be trying to run a software image from months ago with yesterdays data. The success of that depends on how quickly the software has been changing.
Re:Ask HN: What's to stop Russia pulling the plug? on Friday December 18, 2020 @08:29PM (#25474140)
With sticks and stones? They've been inside the nuclear defence computers for months. With sanctions? When the government may just stop working altogether for a year or more?
Re:Ask HN: What's to stop Russia pulling the plug? on Friday December 18, 2020 @08:18PM (#25474076)
Yes, its the clean images I'm wondering about. It might not be easy to find clean images that are compatible with separate data backups.
Re:Ask HN: What's to stop Russia pulling the plug? on Friday December 18, 2020 @08:12PM (#25474040)
But if you restore from backup aren't you going to restore the trojans? And if the trojans wipe the disks after x days of radio silence?

10x'ers

Here's my opinion, I'd like to hear what HN'ers think:* You get a multiplier from using the right tools* You get a multiplier from using tools you know well* You get a multiplier from having solved a similar problem before* You get a multiplier from understanding the requirement well enough that you: - Don't risk solving the wrong problem by working from a spec that someone else has...

( Read More... | no comments | on HN )
Re:The Parker “51” (2018) on Thursday April 18, 2019 @12:33PM (#19692408)
I can see the appeal of these. Just holding one makes you feel you can soak in attention to detail and beautiful handwriting through your fingertips. But the reality is different. I don't have the patience to wait for the ink to dry when I want to turn the page, nor to muck about with blotting paper. Everything just ends up smudged.

But it seems I'm not alone here in being a pen geek, so maybe it's a good place to share a discovery that has been revolutionary for me: Erasable gel and ballpoint pens!

Bright colours, no sharpening, easy and effective erasing of my mistakes. Yayyy. I've tried quite a few, my favourite at the moment are Pilot Kleer.

Now I'm no longer afraid to write in a new moleskin!

Actually you can sometimes convince people their ideas are wrong by laughing at their ideas. I'll never forget my Dad's reaction when I bought a magazine about flying saucers.

Whether or not we can change each others views by laughing at them, it shouldn't be forbidden. In fact it's healthy. All religions, and atheists too, have ideas that should be subjected to the scrutiny of laughter.

Don't confuse hatred of people with laughing at ridiculous ideas. I 100% support everyone's right to hold ridiculous ideas (as long as they don't impact the rest of us).

Laugh at the ties people wear to the office, or the suits with tails that people wear to prestigious events; but laugh as well at pompous religious robes.

Laugh at the belief that flying saucers exist, the belief that fairies exist, the belief that god X Y or Z exists, or at the idea that the universe is just a soup of particles and radiation that cares nothing about us.

Any worthwhile idea or belief can withstand laughter, and probably did when it was young. The fact that some people cannot, means it's not reasonable to take the piss out of the shy kid in class. Laughing at a vulnerable person or group of people is wrong. But for ideas - especially for ideas that claim justification in mystical personal experience rather than rationality - laughter can be the best argument.

Re:Mathematica Version 12 Released on Tuesday April 16, 2019 @02:25PM (#19676022)
I like Mathematica a lot, and I'm happy to see the client library for Python. What it really needs though is a decent debugger. I'd upgrade today if this release had one.

I think the people at Wolfram and heavyweight Wolfram Language users use Eclipse - which provides support for debugging. Though running with Eclipse in one window and Notebook in another is a bit of a dogs dinner.

In the Notebook environment I found the current debugging functionality to be pretty terrible. The GUI needs to work much more like a modern IDE, to support easy single stepping, inspection and editing of values, so us mere mortals can figure out what is going wrong when results aren't what you expect (and this is half of what programming is, after all).

In fact it might provide that somewhere among the layers of complexity of its meta-debugging whatnots. But I never figured it out, and really I shouldn't have to be fighting complexity when I'm just trying to find out why my program isn't working.

A decent debugger would help us understand the product better than any number of new documentation functions.

Re:Learning from Code vs. Plagiarism on Tuesday March 26, 2019 @10:23AM (#19492102)
What if you're having trouble with an API, you don't look at code to see what kind of arguments a function needs? You just go to the docs? What if the docs are sparse?
Re:Learning from Code vs. Plagiarism on Tuesday March 26, 2019 @10:21AM (#19492081)
That's what I used to think too.

But some (admittedly junior) developers I've spoken to said that there was so much concern about IP theft they weren't allowed to look at other peoples' code (I assume Stack Overflow was an exception).

And this link https://academia.stackexchange.com/questions/100081/does-two... is about someone who was accused of plagiarism because of two lines of code.

Learning from Code vs. Plagiarism

Pop is a new code search tool for Mac aimed at students and other coders who are learning a new programming language or API.In the marketing we're trying to walk a narrow line between encouraging people to look at existing code and learn from it, without encouraging plagiarism. (http://etia.co.uk/pop/about/)Say I want to calculate the interval in seconds between two timestamps, and I'm getting...

( Read More... | 17 comments | 22 points | on HN )
Re:Frictionless Code Search for Mac on Thursday March 21, 2019 @01:47PM (#19455182)
We're opening up the beta today
That's a US comparison.

It's complicated to make cost comparisons - do you compare own brands or known brands, etc. But in the UK shoppers report Aldi and Lidl as being better value

https://www.which.co.uk/news/2018/02/the-best-and-worst-supe...

Older »