skysight-inc/HackerNews huggingface dataset:
you could say the same thing about the US military though, couldn't you?
Agreed.

There's also the tech-industry's bete noire: wage fixing via collusion. Surely this happens elsewhere as well.
Abandoning C would mean abandoing one of the very cornerstones of UNIX, or even the heart and soul of UNIX. While I won't be shedding many tears over that, I do expect OpenBSD to remain one of the last fortresses of C instead of being in the forefront of abandoning it. It it their way of doing things and they have showed little interest for appeasing the masses by changing themselves.

So while I don't like C (or UNIX for that matter) I still do celebrate the fact that these people are actually doing something and even more importantly they are doing what they want despite the naysayers and doing it well.
Grace Lee Boggs, longtime Detroit activist, dies at 100
Ugh. What a piece of shit.

An article in Jane, a now-defunct magazine, recounts that
Mr. Charney masturbated during an interview with the
reporter, who is a woman. The article portrayed him as an
enthusiastic Lothario who preyed upon his staff.

zero feels from me. this company was founded buy a perverted old man.
Business and IP Law Resources for Startups
I don't know, I think it's a pretty fair treatment - there are links to an advisory that Ted thinks Rust could have prevented (http://www.x.org/wiki/Development/Security/Advisory-2015-02-...) and to a blog post disagreeing with his http://tonyarcieri.com/would-rust-have-prevented-heartbleed-...
Dogs are worse in this regard. They take a bigger shit in the gardens of other people, they attack other people. I think they should be forbidden to walk freely outside.
Security? Forget to log off somewhere, cell phone gets stolen, account gets hacked...

It's nice to be able to force logoff everywhere.
I have hopes for Rust, too, in this space. They're making a lot of good design decisions to balance safety & performance. Far as Heartbleed, that sort of thing can be detected using techniques from "information flow control security." Essentially, the programmer labels resources in terms of confidentiality and integrity. The type system, compiler, whatever checks them against a security policy. So, a variable containing confidential data shouldn't be accessed by functionality sending data to public sources.

Here's an example from one of the leading groups in the field:

http://www.cs.cornell.edu/jif/

That was turned into SIF, Swift, Fabric, and I think Civitas voting system. Swift even auto-partitions the system between client and server side while maintaining confidentiality/integrity policies. Fabric kicks butt on all kinds of issues in the hardest space of them all. So, given the above, I'm sure a problem like Heartbleed in a mere SSL protocol would be trivial to prevent at language level if software and compiler developers merely chose to adopt info-flow security at least for important projects.

Note: One can use stuff like that even if not supported in main tool set by creating a mock-up of software in supporting toolset. The abstraction gap presents issues but a problem in one might mean problem in other. Especially for what amounts to covert channel analysis of software.
Assuming you trust mtier.
I tried OpenSMTPD / Dovecot for an environment with about 120 e-mail accounts (even promised to write it up afterwards). It just didn't quite work out. Filtering was a pain and it crashed a couple of times. I switched back to Postfix since I know its configuration pretty well.

On the other hand, as shipped, I have had no problems with it on non-mail server. I will probably try again next time I need to revise my mail server.
Dear Jack: Twitter needs to become more open or it will die
Some of those examples are kinda meh. The third example is just (taken out of context, I'm inferring here) a list of relevant things happening in the kid's lives. I don't know how old the kids are, or what their interests are, but maybe the only interesting things happening happen to be a crush and becoming goalkeeper.

The fourth example (again, no context, so maybe am incorrect) is not "women being talked about like they aren't there" so much as "one manager defending choices to other manager, with subordinate in same room because reasons".
As many articles as there are about this in the press, I wouldn't be surprised if this didn't become one of the biggest issues for the presidential election.
How much is the monthly subscription? I'd gladly pay up to $10 if they provide extra features like stock tickers, sports scores, extras, alerts, and a nice mobile app.

Btw, what are the member's advantages compared to any regular web user?
Yakhchal
Did the Supreme Court Just Rewrite Preet Bharara's Legacy on Wall Street Crime?
> That is a very selfish view, one which ignores everyone else except yourself.

Myself, and the server, whose right to refuse to serve me I explicitly recognised.
> Still, the bankruptcy would wipe out American Apparel’s current shareholders, including Mr. Charney, whose stake in the retailer that he founded in 1989 was worth about $8.2 million as of Friday.

That's a shockingly low number for a founder of such a huge business.
I am saying tedunangst's treatment is fair. What I don't like is what people in general tend to do with the argument. I am not claiming tedunangst is doing that with the argument.
The baseband can be compromised, the SOC can be compromised, the OS can be compromised, the SIM card can be compromised, and more importantly the base station it self can be lawfully and unlawfully accessed.

The safe part is in theory, there are only a handful of companies that could actually audit a mobile system in any effective matter pretty much all of them are also the vendors of various mobile interception, tracking, and exploitation solutions.

Dealing with any type of security requires you to identify and quantify your threat agents, if your threat agents are a foreign or a national intelligence service of any note i wouldn't bet anything on the N900 nor on any other cellphone.

If you ask anyone, layman or expert what is a secure device that the NSA could not hack the only thing that they might come up with is a brick, and i wouldn't even trust that[1].
At best the N900 might give you some reliability that when it's off and when the radio is turned off it's actually off, considering that sleep mode power consumption can vary by quite a bit in the same SOC based on conditions like temperature it wouldn't surprise me if you could fool that as well.

[1]https://en.wikipedia.org/wiki/The_Thing_(listening_device)
What do you mean, prostitution or sex slavery or what?
Yes, but that implicit (I hope) with security upgrades. I do the compiles myself. It is pretty easy to build a set for distribution after compiling once.
Your comments have been breaking the HN guidelines. We ban accounts that do this repeatedly. Please post civilly and substantively, or not at all.

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newswelcome.html
Look at your market, maybe off of angel-list, go off of that.

In the Midwest (at least Houston), about 50k starting is reasonable until you prove your value, including insurance.

Naturally, you should seek to increase this number soonest.
Uber doesn't give drivers the ability to seek out surge areas of their city..?
Popular music is entertainment. People wouldn't listen to it if they weren't entertained. They're probably entertained.
https://news.ycombinator.com/item?id=10327575
And "a lot simpler" meaning A LOT simpler. It is the first mail server that I as a non-professional sysadmin could understand and configure correctly the first time using just the man page.
Find companies you want to work for, then look on glassdoor for salaries.

Location + tech stack determine your salary and there is no single answer. If you find comparative salaries to your skill set you can pretty much ask for that, refuse to go lower and get the salary you want.
Yeah, specifically unsafe handling of it. Forkexec seems to be a heavyweight (and less portable) approach that even DJB defended in his paper. My gripe should apply to any using threads.

"Event loops seem to have been the norm for C projects for a while."

I'll take you word for it as I've seen that in the few, top-tier ones I scrutinized. There's a similar trail of research dealing with that alternate model. Have a feeling the meme might apply there, too, but won't accuse them until I see for sure. ;)
I switched to DasKeyboard Ultimate S a few years ago, never looked back to the old IBM ThinkPad keyboards.
Yeah, if you want a free, modern, encrypted, web-based MUA, Mailpile looks like the right choice:

https://www.mailpile.is/
Thats not at all off topic.

My thoughts? Its all in-group bonding and enforcement of the social norms of the group. Even if some aren't comfortable with it personally and wouldn't do it otherwise.

The older I get the more I can agree that the (software) workplace needs to get much more professional than it is.

Maybe I am off base on this one though...
"it's that it's not worth my mental energy to debate whether to spend a nickel."

Related in a way: How people can easily waste "energy" because it takes no "mental energy" to do so. Each time you turn on a light or decide to leave a light on (or even drive to a store) you are not confronted with "going to drugstore, cost 1.23, proceed?". ".10 to turn light on for 1 hour, proceed?" The cost is hidden and given to you in bulk. You just have to decide generally that spending $35 per week for gas is "worth it". (Along with other fixed type expenses).

It's interesting that the opposite of netflix was the video store, even with a monthly plan and no cost per DVD. You would have to get to the store, review the available movies, and then decide which one to rent. All along knowing that if you got home and didn't like the movie, you'd have to trek back to the video store and repeat the process. In that case, and even assuming the cost was $9.99 per month, you are closer to having a "cost" and energy (physical and mental) than you do on netflix.

On netflix the mental energy requirement is there as well but not the same as a video store obviously. You still have to cue up the movie, watch some of it, and then decide when to stop watching (3 minutes in, 20 minutes in etc/) if it doesn't appear to be what you like. This is after spending some thought to what you want to watch in the first place.

Which brings me to my point. One of the things that I have learned in business is to not make people have to think, that is to make it easy for them to make a decision. Instead of giving them 20 choices only give them 3 or 5 choices. People I have found, at least with things that I have sold, like this a great deal.
What if you created a website that no matter how hard you try, you can never make enough money to justify it's insane valuation? You hire the guy that created it. If that fails years down the road, hire a blonde.
Air and ground robot collaborate to map and safely navigate unknown changing terrain
I tried a global script killer a few years ago and it made the web unusable, with having to "turn on" scripts on almost every site I used in order to do the most basic things.

It's also worth mentioning that I have both Ghostery and Adblock installed, and running, and this still came up.
Well it was worth 12 cents a share on Friday so it's not that surprising that even if he had a majority of the shares it'd be worth so little.
Well if you look at a lot of top fashion brands that still stick around after decades, they all started out by being "edgy". You can't stand out if you make what everyone else makes.
Ev – Why i'm glad Jack is back at Twitter
That wouldn't solve any core problem of governance: those bills are an artifact of members of Congress having constitutional power -- the right to vote against a bill. Given that they have that right, they also have the right to withhold it until they're bought off.

If your proposal became law, Congress would still do these compromises, they would just pass the provisions on a different bill -- say, "vote for my bill and I'll later vote for your pork project in the next appropriation". All that would change is the difficulty of coordinating it. The fundamental problem is still there.
> Not many 30 year olds have both the body and the mentality to wear the American Apparel clothes that they bought when they were in university.

Speak for yourself.

http://i.imgur.com/C4C9Llb.jpg

I'm going to grave with these on. These colors don't run!
Just to be complete, the openup utility from M:Tier covers this as well (see my other comment for more details).
Same thing with nightlife (except it's closer to 2-3 years), since the target demographics are the same, but the people going to (or used to go to) clubs/bars get older.
Moreover, companies who commit fraud eventually get caught and their people go to jail.

Which is why all the bank executives are currently in jail? (Contrast DOJ enforcement after the latest financial blowup to their conduct after the S&L crisis).

See Bernanke's take: http://www.usatoday.com/story/news/politics/2015/10/04/ben-b...
At least half of the blame should be not on them. IMAP doesn't know a thing about what happened to email in last 10 years (few minor exceptions apply).

They're merely implementing their own means to access email in convenient and modern way. Say, IMAP has no labels[1] or contacts[2] (and many other things) - there are proprietary extensions, MS Exchange being the most famous one, but they're... proprietary. And given that proprietary implementations differ, it makes sense to create an unifying wrapper.

And JS apps and web services are just an approach that's trendy today. Personally, I don't like it either, but can't blame for going with the flow. Especially since it's a business (and going against the flow has costs, both in development and adoption), not a private project where one can do things in a way that just feels right, ignoring anything else.

I believe it would absolutely make sense to bundle the "sync engine" within the mail client, though, to make it standalone. But I understand it's done this way just because there was only the engine (as a service, not a library) at the beginning.

____

[1] https://nylas.com/docs/#labels

[2] https://nylas.com/docs/#contacts
The only thing #1 would motivate me to do is (a) complain to the boss (b) complain to hr (if it exists) (c) get my resume in order in preparation for peacing out.
I ported Tinywm to Go
Yep, the only reason we didn't have one for launch is a lack of time. :) You want to help? First step is making sure `script/grunt mkrpm` works from https://github.com/nylas/N1!
I am not already giving my emails to this service, I'm giving them to my email provider. I don't see what value these guys provide that's worth giving them all my mail.
> What if your company decided that you're not worth paying, but still wanted your work?

Perfectly reasonable, then you stop working/creating content and find another job. Capitalism is selfish.
Performance Tuning Clojure Generative Tests
Most perpetrators of mass shootings (more than 4 people shot) do not have a diagnosable mental illness. Certainly most of them are not taking psychiatric meds.

Have you looked at each perpetrator of the nearly 300 mass shootings in the US this year?
If they went back to their roots as a messaging API for other apps, they would not have to build new apps. Become the messaging backbone for the Internet. That's plenty of scale to go after.
the reason is that the a large portion of policy makers still believe that the american economy runs on a military industrial complex.

The military industrial complex works great when there is an enemy to fight that requires the production of military equipment. examples of this enemy, in the past, were the Axis powers and the USSR during WWII and the cold war. It doesn't work so well when there is no enemy to fight.

after the dissolution of the Soviet Union in the early 90s, there was an "enemy vacuum": who would be the next enemy that the US could use to drive the military industrial complex? Russia wasn't worth fighting indirectly any more because they were too weak, and there really wasn't a competitor that was strong enough or threatening enough for the US to parade around as the enemy.

enter terrorism: it provides a target that fulfills a number of very crucial aspects:

1) non state actors: the US can go to war with terrorists without going to war against the officially recognized government. This is key to global security because conducting war within a nation's borders no longer constitutes an assault on that nation. This prevents WWI type wars that start as a series of cascading mutual protection treaties or similar.

2) difficult to define the enemy: who are terrorists? whoever the ruling party deems terrorists. everyone else is a freedom fighter. This makes it convenient to come up with a new enemy group of terrorists when the current batch has been "defeated" or the american public becomes war weary.

3)easy for the government to drum up support for new military action by creating and appealing to a sense of fear within the populace and a desire for "safety".

4) oil: the majority of terrorist groups that are in the focus of the american public's attention are primarily located within countries that have large oil interests. Other terrorist groups located in other areas, such as the philippines or south america, are largely ignored.

5) percieved threat of terrorists: it is easy to believe that terrorists are a significant threat to US citizens precisely because of their ability to strike on american soil. This greatly adds to their value as a enemy for the military industrial compelex because the general us population sees the threat as legitimate. (a converse example of this would be if the new enemy would have been, say, brazil: they're not really a threat to the US because they wouldn't really be able to directly threaten the american mainland.)

there are other reasons, i'm sure.
Wove Band V Pebble Time
Did you write the browser yourself? On an operating machine that you hand-coded on a CPU architecture that you clean-room designed and implemented personally?
Its not that we don't want to pay - its that we're only willing to pay when asked to do so - nobody is going to stand up and say I'll pay. And publishers aren't trying to make things readers want; advertisers have become more important to publishers than users, and that dynamic is what needs to change (just as its changing with TV/netflix/hbogo/amazon, etc)
So, the claim is meaningless for most users unless they restrict themselves to the tiniest subset of software. That answers the first question.

Ok, so the second is, "Have there been defects found in any parts of the default install after those parts were distributed? And were they just fixed or analyzed for exploitability with an update on the website if necessary?"
Don't know how their monochromatic, print-less clothes can be seen as edgy. The styling of the models, provocative sure, but the clothes were about as plain as can be.
The original comment expressly states a "non-scaling" version of twitter...what is so hard about that? this sub=thread then clearly illustrates what "non-scaling" means and doesn't mean. smh
OpenSMTPD is in the default install, however in the default configuration it does not accept remote connections.
What's a Used A380 Superjumbo Worth? Airbus Is Set to Find Out
Play the entire Atari 2600 catalog on IPFS
I suppose that could be done, but email itself is a very complicated thing to deal with with a lot of moving parts. OpenSMTP was supposed to have a much simpler scope of operation.

Think of the configuration method as using duct tape to permanently set the switches/levers of an f1 race car instead of just getting an automatic Toyota car that is simpler for almost all people to drive.

A lot of the security and simplicity is supposed to come from not having so many options/knobs/levers of operation.
I agree. I also wouldn't really call them sharing... Who's sharing? We're paying for a service. Nothing else.
Maybe it's just feedback telling you to "[post] well enough to justify my very existence".
"The OpenBSD project produces a FREE, multi-platform 4.4BSD-based UNIX-like operating system."

You can't really divorce UNIX from C.

The only other language option for an smtpd server in OpenBSD base would have been Perl, and I bet people would complain about that just the same.

And perhaps we wouldn't be able to review it properly if it was written in Perl. Perhaps Marc Espie could. But OpenBSD has plenty of people on the team who are well trained at auditing C.

I'll be doing my part and read some smtpd code during an 8h train ride tomorrow. I already read one file and found one bug in it and told gilles about it. That's how this works. Changing the language won't magically fix anything.
I'm conflicted on the issue. As a general principle, writing security-conscious code in C should be avoided.

On the other hand, the issue is a tad more subtle. There seems to be an almost Pavlovian revilement and panic against C code, and this usually comes from people who haven't dealt with the language in a long time or at all in any depth.

For one thing, the blanket assertion that secure C code is a Herculean task, doesn't quite pan out. djb showed one way, based on a few general principles espoused in qmail, that has since successfully been reapplied by people like Wayne Marshall, Laurent Bercot, Bruce Guenter, Paul Jarc, JdeBP and so on. Much of it comes from abandoning the C standard library in favor of more robust alternatives like libdjb variants, clearly architecting process/module boundaries, using simple formats like netstrings and text0 that need not be "parsed" in the conventional sense, etc.

Further along the line, we have the SEI CERT C Coding Standard that comprehensively identifies many pitfalls. [1]

Deeper still, cryptography is one area where abstraction can be an enemy. You actually have to deeply worry about time complexity, branch prediction, precise timing, compiler optimizations and so on [2]. A tool like C becomes desirable here.

Lastly, but crucially - you're on Unix, for better or for worse. POSIX, SUS, all of those standards? They're deeply written with the conventions and API/ABI semantics of C in mind. Such is life. When you primarily write code at that level, the easiest way not to have any impedance mismatch is to just write it in C.

[1] https://www.securecoding.cert.org/confluence/display/c/SEI+C...

[2] https://cryptocoding.net/index.php/Coding_rules
I say net loss because with current http the loss of closing the connection is typically much higher than the loss of downloading more bytes than you need. Connection reestablishment needs a lot of round trips.
Don't use your pinky, use the meat of your hand to press the control key.
From what I've read in the Musk biography and elsewhere, he is involved in really really low level decisions, to the point that he's been labelled a "nano-manager." Surely he's not involved in absolutely every decision, but by all accounts he is much, much closer to the details than you would expect a CEO to be. Especially when it comes to design/ engineering details.
I don't think people are OK with it. It's more of a case that they realize this is a problem that might not have a good solution.

Currently, Linux kernel works. The process for changing it, overall, works too.

Currently, some people are driven off by abrasive language and personal comments. You might be surprised to find out that attempts to enforce language and behavior rules will also drive people off. And not just assholes. Very often such attempts lead to replacement of open rudeness with more subtle, but equally (or more) hostile tone-policing and emotional reasoning. It creates politics. Open rudeness is often easier to ignore, because it's obvious and isn't backed up by "official" code of conduct.

I'm not saying that nothing could/should be done here. It's just that simplistic solutions like creating a strict code of conduct and kicking out the "bad" people are likely to do more harm than good.