skysight-inc/HackerNews huggingface dataset:
> Well it would have stopped this actual piece of malware!

And I'm not infected by this piece of malware, so I still trust myself over Gatekeeper.

> How often are you installing unsigned applications that a single right click to add to a whitelist is too much effort?

Far more often than I install things from the app store. I don't find it to be a useful feature, so I disable it.
Have a look at the phoenix framework, written in elixir. While there aren't that many drag'n'drop solutions available than in meteor, everything is rock solid, fast and fault tolerant. Oh, and it is very familiar for rails developers, while also having powerful channel abstractions (incl websockets, meteor's secret sauce), postgres as default, and native implementations of channels for ios/android clients.
> First you add an extra function pointer for any member, even if it's not virtual

Wrong. If some function is not virtual, there's no point to add it to vtable; so, it's just a regular function.

> Also the first technique doesn't feel like OO in any meaningful way.

Really? Of course I can be wrong, but for me, defining a state object and operate on it only through methods (i.e. functions that are given a pointer to state object) is exactly what is called an OO style.
It's close to that when you factor in benefits and perks. That said, proximity has a lot going for it, and software is a high margin business. I don't see companies moving away from the Bay Area any time soon, and I don't see developers salaries falling soon either.
That seems like a problem that has quite a few possible solutions: deterministic name mangling, hinting in the source as to how the name should be mangled, an external mapping of mangling exceptions and/or rules to be used by the transpiler. None of those are mutually exclusive, all could be used together.
How we lost (and found) millions by not A/B testing
It may well do, but I certainly don't want to visit that page every time I want to type the name.
Thanks! Any recommendations for someone looking to get into this space, especially in terms of things you had wish you knew starting off? (I'm looking at this as a "long shot" diversification of a portion my savings, allocating a comparatively very small amount and going entirely hands off)
Backblaze + Digital Ocean ... YES.

To elaborate: I think these two would be able to become a viable competitor to AWS. If you think about it AWS launched with S3 and then EC2.

They could differentiate themselves by staying as a pure IaaS play. Then companies like Dropbox would not be afraid of DigitalBlazeOcean moving up the stack and competing as AWS has done in several instances (e.g. WorkDocs).
I thought the bottleneck was station size, since they already have enough cars to fill them up? Do they have room to add more cars?
I read the page and the linked "What's New" page, and still cannot tell you what, if anything, they added. Bing integration?

Random aside: So I know this subscription software business model is extremely popular. Microsoft currently still sell Office as boxed software. But what happens when they stop?

When everyone pays e.g. $10/month just to keep using the software, what is Microsoft's financial motivation for improving it? I ask the same thing about Adobe/Creative Cloud.

The subscription system can make sense for customers when a market has legitimate competition. But with MS Office and Photoshop, they're by far the largest shareholder of the market, so they could effectively stop developing the software (beyond trivial updates and bug fixes) and there isn't a darn thing anyone could do about it (i.e. you cannot stop paying, since it is a professional tool with no viable alternative).
> That's simply not true. When I do my taxes I have to report my yearly income.

And the reason you report your income correctly, and trust that your neighbors do too is...
Is that the time it was last modified or the time it was last signed?

The last high-profile mis-issued cert was last week, and didn't even escape the control of people who were entrusted with the CA private key. So MS might not even be manually revoking it. Before that, the last blog post on googleonlinesecurity.blogspot.com about a mis-issued certificate was ... March 23.

I would guess that it's re-signed daily, but only changes when there's an actual change to be made.
We had a pretty epic discussion on here about that yesterday, in fact.
https://news.ycombinator.com/item?id=10250599

But the reason the Pentagon didn't purchase was not because of the F-35, but because Congress wouldn't let them defund the A-10, which the A-29 replaces. DoD isn't going to pay for two CAS/COIN aircraft, so the A-10 remains.
Can confirm, getting similar output on Windows 10.0.10240. Although url is working works in chrome. Could this be a bug in the certutil updater?
WhiteHouse.gov (2000)
A full featured SDR capable of transmitting (based on hackrf).

Which, to my knowledge, is the first time a conference has handed out badges that were actually useful afterwards. Pretty awesome.

And here's the talk: https://media.ccc.de/browse/conferences/camp2015/camp2015-68...
You are doing a great job with Rust, but I think you always jump to quickly to criticize Wirth languages and push for Rust.

Mesa => RC with local GC for collecting cycles.

Modula-2 => True, does manually memory management, but avoids all other C memory corruption errors.

Modula-3 => Uses GC only for types allocated via NEW. Library contains generic RC pointers. Untraced pointers can only be used in unsafe code.

Oberon derivates => Uses GC only for types allocated via NEW. Active Oberon added support for untraced pointers only in unsafe code.

Ada => No GC. All memory allocation is controlled. Deallocation is only possible via regions or explicitly in unsafe code. There are generic RC libraries as well.

Pascal dialects => No GC. Suffer from manual memory management, but none of the other typical exploits regarding out of bounds or pointer misuse.

Yes, they may lack affine types, but had they succeed in the industry instead of C, the need of something like Rust would be greatly reduced.

As such now we have to place our hopes in something like Rust, because the new generations never heard of those languages and think C was the very first systems programming language.

However every time I look at Rust sample code I would like to see the same amount of _unsafe_ being used like in the those languages.

Instead, many Rust users seem to sprinkle it everywhere.
Interesting. I've heard that thrown around before, but I've never heard someone say the same thing about Python, even though the main Python implementation is C.
I think it's late enough that it's no longer hindsight. (And note they didn't even enable stack cookies for the extra protection that'd have given them.)

C gives you all those SQL injections, XSS, shellshock, etc. in addition to all memory unsafe exploits - it's a superset of vulnerabilities (actually, I'd not be surprised if C makes it worse, as the code is far, far more verbose and focused on minutia and hence higher-level logic failures are more difficult to notice.). And, going from widespread commercial software, the other issues seem to account for much less of the critical security bugs.

Even so, if they had some amazing backcompat reason to stick with C, they should have been sandboxing and otherwise limiting the impact of the apparently-inevitable, trivial memory corruption issues they're sure to have created.
Given that they did this, then denied it for a year when challenged, surely the big question is: what else are they lying about?

Normally you'd assume that basic self-interest would stop a large company from lying too much, but that theory has gone right out the window after these revelations.
Why do you think quality has zero to do with scale? Care to shed a bit of light on that thought process?
Wait, bartering? At a restaurant? What did people exchange for the food?
> how do they expect to get people to bring their cars in for the fix when the fix can be expected to make their cars get worse fuel economy and a decrease in power?

One option would be to make it an automatic fail of the emissions tests for any car where this has not been fixed. This obviously won't work universally but for locations where emissions testing is required periodically this could help move the process along.
That would cause an even greater scandal than what they are in right now.
Maybe you guys need to make friends in some of the S3/Glacier capacity teams ;)
I was lucky enough to be born with gifts that make me good at writing code. I trade that coding ability for money. I invest that money in the S&P 500 (ticker VOO). I've been doing this a while and have invested about $900,000 to date. The trailing 10 year return is about 8% per year. So let's call it $72,000. $72,000 of passive income.
Great -- the very first button I press (the frowning cat) cleared out my entire painting. And I have no idea how to get it back.

Clicking on every button shows that clicking the cat again brings it back. What does this cat actually do? Labels would be useful.
I'm not sure it explains the last auto update check time for the trusted CTL ;)
> unobtrusive: don't get in the way of the content I'm trying to reach
> You know, like a billboard.

There are people that think billboards are the worst kind of advertisement because they only block pretty views of nature rather than coming along side content that you want to see. https://en.wikipedia.org/wiki/Highway_Beautification_Act
Come with your own questions for the interviewer.

This should be a two-way dialogue. You want to understand the Hiring Execs biggest priorities and specific challenges. What does success look like to him?

Ask: Imagine we're having a review meeting 12-18 months from now. It has been a really successful year. What would be the top 2-3 things that we accomplished together?

His answers will open up the conversation, full of insights.
Up to the first 4 TBytes it is only $189 which includes you keeping the hard drive. I'll make it even better - if you ship us back the hard drive within 30 days (you pay return shipping) we'll refund the entire $189. The info on the program is published here: https://help.backblaze.com/entries/67512970-How-to-order-a-r...
Heh, I use this software.

is it only Windows 8 that is affected? we don't have that deployed anywhere at my company. :)
How we style our Sass at OpenX
While I don't disagree with you, I do want to make clear for the sake of argument that those mountains were there before the microchip, and they'll remain for a very long time. My point is that a big money monoculture is a great way to homogenize and wash out a cosmopolitan culture. The homeless might remain, but the hippies are long gone...
Not to mention that they often target drivers who should be keeping their eyes on the damn road, not reading a billboard while traveling 65mph on the freeway.

(Edit: Thinking about it, I think I'm one of the few people in my state to ever obey the posted speed limits. So change "65mph" to "80mph".)
Encrypt and decrypt content with Nodejs
> True... and I bet the performance was significally slower.

Obvious, since those systems pre-dated PDP-11 hardware.

> Also I think the portability in those languages was also limited.

Have you ever coded C before ANSI C was approved?

It was only portable to UNIX itself, just like those other OSes and their systems programming languages.

Each C compiler outside UNIX implemented its own subset and semantics, hence why ANSI C had to adopt so much UB to avoid breaking too much code.
Last autoupdate check on 2015-09-26 ... IN THE FUTURE? THE LAST ONE?
I've never been angry at a billboard, but then again I've never lived in a hellscape where they are the only thing in sight. And if I did I'd probably move away. And the advertisers would have to deal with it.

edit: maybe more accurately "a billboard has never obstructed my use of the highway, reduced my MPG, tampered with my car, or increased my cost of traveling in any measurable way"
If there are rules, that throws honesty out the window.

Proof:

Either the rules don't require any honest inputs, or else they do.

If they don't require honest inputs, then the outputs aren't honest; they emanate from the rules.

If the rules require honest inputs, then what are the rules for other than to massage the honesty into something else? The way you get a honest output statement from a honest input statement is not to apply any rules.

:)
Hardest Super Mario Maker level ever Made cleared by the creator only so far
Noob here.

Upon reading the original bounty, which stated the purpose was "to study the possibility of obtaining technical information on users and users' equipment of Tor anonymous network..." Could it be possible that Russia's intentions with Tor are purely ethical? Perhaps verifying it's integrity or seeing with their own eyes the benefits before investing?
A bit of both. I wouldn't characterize as being quite so malicious, but it's business for sure. The Saudi's need to maintain market share, even if they are selling it cheaper. They're banking on the price going back up, and if it does and the world has switched to US suppliers, then they're out even more.

But there's another country they're looking to disrupt, one who's primary source of income is through oil sales due to sanctions. Their biggest enemy.

Iran.
like always - it wasn't one person doing it, it was large number of people involved ... Reminds me like at some previous employer some years ago a critical security bug was explicitly and openly waived by the product team under leadership of the same PM who had just been foaming that "security is our top priority".
> This system defeats any large payment entity from payment tracking.

Merchants of physical goods must know the identity and delivery address of their customers in order to deliver them. Given how easy many companies find it to embed 3rd party trackers or adverts on their site, it seems reasonable to believe that they will also find it easy to sell this data ("to help detect and prevent fraud") to the payment processing companies.
Several years back, Hyundai got in trouble for having worse fuel efficiency than their EPA numbers claimed. They had to pay off all owners of that car (I don't recall whether that was due to class action lawsuit, or an agreement with the gov't).

So it seems to me that if VW has to detune their engine performance, they'll similarly have to compensate owners of the affected cars.
Groupon makes money the more transactions take place, but for the business there is a limit to how many transactions you can successfully carry out with optimal service.

Sounds like this tension hasn't been managed very well.
As I understand it, these cars were designed with a simplified system for maintaining low emissions that used fewer parts. Evidently, software can allow the system to pass the emission test but at a significant loss of power.
Have you ever wanted to share raps with friends? Now you can with RapChat
Nice! Couple of things:

- Firefox on Ubuntu yields "TypeError: t.srcElement is undefined" when I try to change the colour.

- I don't have any fonts for some of the icons in the buttons (e.g. the arrow). Seeing as you're presumably already loading the textures for drawing onto the canvas, you might as well just use an image for the buttons too.

Hope this helps.
I wonder if Audi is affected by any of this.
Well, the last two presidents have been regarded as illegitimate and intolerable by large segments of the population. I'm not saying that's good, but we've survived it so far.

However, I share your unease, your feeling that Something Is Amiss.
You are mostly listing CDNs and/or DNS services. None of which are "competitors" to what Cloudflare is offering.

Akamai and Incapsula are the only real competitors and, tbh, none of them are particularly "good" which is why CloudFlare has been so successful.

Sucuri is fine for a corporate blog or the like but it just really isn't usable for a high traffic site with alot of dynamic content.
The numbers in your first paragraph are off by a factor of 1,000. The signs are in microsieverts per hour, not millisieverts. Only the author's peak reading of 6.8µSv/h would have exceeded the maximum for radiation workers, and only if he stood in that spot for a whole year. Even then, it would still be below the lowest dosage that is clearly linked to increased cancer risk (100mSv/year).
One more reason for publishing the source code to drive-line software in cars. And don't give me nonsense about 'millions of lines of code' (I've heard that before in another context too), an ECU is not 'millions of lines of code'.

And as far as VW is concerned this is only the beginning: how many customers are going to sue VW for a sudden decrease in market value / resale value of their vehicle?

The damage to the VW brand is enormous, if not fatal. But the damage to 'Made in Germany' and the rest of the German brands is collosal as well. This will surely be reflected in the GDP of Germany for many years to come.
If we remove the State apparatus that enforced law by the threat of violence, we will just replace it by private law that would be enforced by the threat of violence. The only way we could create a society without that is if we genetically modified everyone until no one could commit an act of aggression even if they wanted to do it.
Part of the cost may be the anticipation of lawsuits since the car isnt as advertised anymore. How much less would the car have been worth to people? $1000? Thats 4% of a golf TDI's MSRP. Seems reasonable.

11m cars times $1000 and you're at $11b!
Actually, many Apple upgrades have a side effect of turning it back on, so I end up giving it another shot whether I want to or not every few months. Both my MBP and iMac had it turned on after the last Apple updates a few days ago, and I found out when I wasn't allowed to run something.

If it were just unsigned apps I wouldn't mind so much, but it's the stupid, "This application came from the internet..." dialog box that drives me nuts most of the time.
India backtracks on draconian social media policy
downvotes? Is something I said wrong?
INTERVIEWER: What's your greatest weakness?

INTERVIEWEE: My greatest weakness is that my canned response to that question probably won't satisfy any interviewer that asks it. Even with unlimited preparation time, knowing that someone, somewhere will ask it of me eventually, this is the best I can come up with. So now you have to ask a follow-up question to try to peel back a layer of canned response.

INTERVIEWER: Is there anything about you that you think you could improve?

INTERVIEWEE: Well, yes. There is a severe bug in the inner layers of my canned response that I was never able to get rid of. It has an infinite loop.

INTERVIEWER: So you have trouble debugging?

INTERVIEWEE: There is a severe bug in the inner layers of my canned response that I was never able to get rid of. It has an infinite loop.

INTERVIEWER: I'll just mark you down for "smartass".
1. Holy shit that is a fantastic way to do mobile UX. Radials for each thumb? Fucking brilliant. I could imagine this could also make a great keyboard layout for certain domains

2. I would flip out even more if this UI was available for more mainstream functional languages like Haskell or Clojure. Do libraries break the process? I don't think they have to.
Chess computer Komodo 9 playing GMs with handicap
I've got quite a lot invested in Heroku, it's honestly really disappointing to see Salesforce do something like this. It's the responsibility of EVERYONE in the industry (especially larger tech companies) to take a stand against government, and help push for individual privacy.
This is interesting to me as a way to give software candidates quizzes. HackerRank similar services are comically expensive.
The gift that keeps on giving.

It will be interesting to observe the regulators of PIGS and Eastern Europe - will they try and punish the German government over this. They have an axe to grind with Merkel.
Sorry! D:

That's the "oops" cat: 1 operation undo/redo.
That was easy to do since you could determine the difference in gas cost between advertised and actual performance. How do you value power though?
​How Amazon Web Services crashed and rose again
Yup. That is the deal breaker for us. Our infrastructure exists on AWS so 100% of the data transfer is free (within the same region). While your per-GB storage is indeed less, the transfer costs would make too expensive ultimately
Thanks for the report; I have screenshots from others and will take a look at fixes shortly. Cheers!
I'm curious what the reasoning was behind approving a measure which had such a high risk of backfiring very badly for vw. Is it something which was approved higher up or something an engineering team quietly hacked into place to meet an emissions target.
Every solution feels great and neat in the beginning until you wake up one day and feel sick to your stomach from the mess it has created.

Most vtable like implementations in the kernel are nothing more than struct of function pointers, and this is almost exclusively.
OK, I'll try. I'm calling out what I see as an example of the "psychology journal ad-hominem" mentioned above, and perhaps having a little fun with the folks who are nodding along.

To clarify, the basic problem is that anyone talking about this story at face value will either a) presuppose that each problem is legitimate, or b) get accused of being affected by the psychology under discussion. The choice of global warming combined with the description of the effect as one of "aversion" and "denial" implies that people who don't agree with the mainstream argument are affected, while those who do agree are not. Notice how this release does not mention the equally valid conclusion that people who like a solution might be more inclined to believe that the problem it solves is real.

Being an unconventional environmentalist myself, I've seen this tactic several times before and am simply pointing out what it is: a retreat from the actual issue under consideration, and an attempt to re-frame the debate as one of psychology and the mental shortcomings of members of the opposition. Don't get me wrong, I can totally agree that some version of this phenomenon is real. In fact I've wondered many times over the years how much I might be personally affected by it. The general case is called "confirmation bias" and I'm not typically that optimistic about my own immunity to it, although I have made and will continue to make efforts to recognize and counter it. Thank you for your reminder and for being tactful and polite about it, but the idea is not news to me.

In summary, whether I may believe some version of 2) in part because I believe 1) or vice versa is an interesting question. However, immediately framing this particular research in this particular way amounts to (or will be used as) an elaborate and silly ad-hominem, nothing more. Anyone who uses it is grasping at very fine straws.
Yes: http://www.bbc.com/news/world-us-canada-34298259

"It affects 2009-14 Jettas, Beetles, Audi A3s and Golfs and 2014-15 Passats."

Audi and VW share "platforms" which comprise of the core parts. Current-gen Passat, Golf, and A3, among a few others, all use the MQB platform.
Corporate double speak.
Elixir / Phoenix App with Authentication
It would seem that this is just one of the ways that this issue is going to get very ugly for VW. To the degree a required fix "just" affects the fuel economy, they can presumably make a payment that would mollify most (but not all) owners. If the performance profile is materially affected though, I can absolutely see a lot of owners demanding a refund.
> One more reason for publishing the source code to drive-line software in cars. And don't give me nonsense about 'millions of lines of code' (I've heard that before in another context too), an ECU is not 'millions of lines of code'.

In that case we could have aftermarket parts and/or interoperability. These are bad things that could cut into corporate profits.