skysight-inc/HackerNews huggingface dataset:
> Search the Chromium and Firefox bug trackers.

Hardly standup examples of good C++ code.

Take the latest use-after-free in Chrome to date, namely CVE-2015-6765, from the top of[0], The fix for that is was [1], and adds a memory safe standard container (std::set) to keep hold of some objects to change object lifetime. I've looked at it for about 3 minutes and I can tell immediately that the entire implementation of the "appcache update" functionality is a complete hack job. There are variables and calls everywhere keeping track of, and querying, state. There are multiple containers holding objects in different states being manipulated all in the same routine, and this fix adds another. If a "job" can't outlive its "fetchers" then why don't the fetchers own them?

Raw pointers everywhere, this pointers being passed around... "DeleteSoon"... excessive assertions...it's amazing at how much ugly, poorly structured, and scary looking code can be packed in to one file.

I would argue this is a data point in favour of a correlation between programmer skill and frequency of vulnerabilities. Whoever wrote this clearly knows C++, but they don't know how to write good code.

[0] http://www.cvedetails.com/vulnerability-list/vendor_id-1224/...

[1] https://codereview.chromium.org/1463463003/diff/20001/conten...
Literally 6 VPNs? OMG, I haven't come back to my motherchina for 2 years...Cant believe it get so bad...
Canadian data traffic moves through U.S. nodes under NSA jurisdiction
That's only probably the infection route this begs the question why didn't they go in the diplomatic bag. I hope some one in the CIA got fired over this fiasco - the KGB have had people put in front of a firing squad for less.
Please stop posting unsubstantive comments to Hacker News.

We detached this from https://news.ycombinator.com/item?id=10779967 and marked it off-topic.
> This is a disease we thought we'd erradicated

You can't eradicate tuberculosis, but you can prevent the active form rather easily by making sure the population is well fed.

http://www.who.int/mediacentre/factsheets/fs104/en/ :

> About one-third of the world's population has latent TB, which means people have been infected by TB bacteria but are not (yet) ill with the disease and cannot transmit the disease.
Reducing pollution in the air, by polluting the water.
Honestly I have no idea how you'd structure a flight sharing business in a fractional ownership way such that nobody is actually being compensated for anything.
One additional note above is that having a less-flexible destination (due to the passenger) can cause the flight to be less safe.
It's just another bump on a slippery slope of absolute, no exceptions legalities that now have close to 1% of the U.S. population in Prison... this is insane.

I can understand a murderer, or gang leader released after serving 20-30 years of a "life sentence" as a conditional parole... or even a true child sex offender, not someone who was 19yo with a 16yo girlfriend (not speaking to this case, but someone I knew who fell into that scenario and now has to register for the rest of his life, even though he later married that same woman).

The ex post facto bit is even more disturbing.
Their demo still requires a password. A little white lie?
It was Massachusetts. A number of people told me later that I could've collected, and a quick glance through Massachusett's Unemployment Insurance FAQ shows no mention of being a student other than UI not covering student work-study programs for financial aid:

http://www.mass.gov/lwd/unemployment-insur/resources/questio...

I didn't because it never occurred to me - as far as I was concerned, I left my job normally to go to college and they just didn't pay out the vacation pay. I wasn't hurting for money then or now (I was still living with my parents at the time), so I don't really regret it, but it does appear to be a real, genuine loophole in the system.
> People want to be reassured that they're doing the "right thing", that what they're doing is "correct" according to some external source of truth

I think this somewhat boils down to being able to take advantage of others experience. If you're the only person you know with a Macbook, would you feel that you are able to take advice from everyone else with Windows desktops? ( Or maybe some poor analogy about tainted kernels and bug reporting :) )
I ran the same curl command twice in a row and got files with different sizes! I think it actually does have to do with Cloudflare rather than with curl in this case.
I remember that episode well! Such a funny show.
I'm not sure this is a great comparison.

Consulting rates and enterprise software pricing are two different beasts, especially when hosting infrastructure is involved...

On top of this, enterprise buyers are not always going to be sophisticated enough to determine whether their business requirement means they need module a or b or feature x vs. y from a random enterprise suite.
Boardgames have always had that side to them the genesis of monopoly is one well known example.
So now I can find out the first and last name of the owner of whatever email I punch in there?
Sir, please keep logic out of this.
Why would you use this instead of login with Facebook/Google/Twitter/etc., which only requires two clicks from most users and actually has better privacy implication since the user knows which data you can access?

Or maybe the goal of the service is for web sites to surreptitiously get more data from users who are otherwise unwilling to provide it, but are somehow willing to provide an e-mail address tied to their real identity?
I take issue with your claim that the majority of the populace knows how to drive. My experience differs strongly.

All kidding aside, the numbers are a big issue. How many cars are on the road versus how many planes in the sky? Add to it the fact that in the sky you have three dimensions of completely free travel ability to evade accidents, where in a car, you typically have at most two and more commonly one completely safe area to "duck into" to avoid an accident.

Plus, no one (at least in my mind) is advocating that anyone gets to FLY the plane, they're saying anyone should be able to fly IN a plane. You don't need to know shit about driving a car to know whether or not a car you're getting into is safe, and same goes for a plane. If the exhaust is dragging on the ground and a rear door is missing, you don't need to know anything about cars to know that's probably not the safest car ever.
Data Science Memes
This line of thought comes up in every time this subject comes up. I'm genuinely curious where you would draw the line:

0. is it ok to fly for compensation if you have a commercial pilot license? (The FAA draws the line here.)

1. is it ok to fly for compensation if you have a private pilot license?

2. is it ok to fly for compensation if you have a recreational pilot license?

3. is it ok to fly for compensation if you have a light sport pilot license?

4. is it ok to fly for compensation if you have a student pilot certificate?

5. is it ok to fly for compensation if you don't have a pilot license?
Leadwerks Game Engine 4 preview released
Primes form a circle because they can't be divided.
As does having a machine-level visual debugger for at least one of those architectures. Being able to switch to the CPU pane and see how C-function call and return were handled at the register level in Borland's Turbo Debugger was profoundly enlightening for both my C and assembly coding.
Swapping the languages fits exactly consistently with what GP said.

Trying to use first-class functions and OO paradigms in C is going to bite you in the ass, hard.

Just as iterative pointer manipulations in Python aren't preferable.

Both languages have different "styles" that suit their purposes excellently, but mixing them improperly in either direction will be painful.
Are you referring to this paper? http://wphomes.soic.indiana.edu/jsiek/files/2014/08/retic-py...
One this is to allow flying and the other is if you actually should. Accident rate in low-end bracket of flying is very high (higher than roads and other forms of transport combined) and a huge chunk of accidents is due to inexperience of the pilots.
This looks to be very similar to the warning that Twitter was sending around a while ago. Here:

https://news.ycombinator.com/item?id=10722633

That contains the text in the discussion, and links to the text, etc.
"Programming from the Ground Up" - a gentle introduction to x86 assembly on Linux - http://savannah.nongnu.org/projects/pgubook/
I feel that using spaced repetition is counter-productive to learning a language / framework, meaning that using it would be worse than not using it. That is directly counter to the article's argument, though I'll admit to not having actually read it.

But even if it wasn't, then the time trying to memorize things would assuredly be better spent solving problems using whatever recall you already have and referring to the documentation when you come up short.
What was the increase in conversions? Right now it's just hand wavy :)
Ryan Hoover: Let's continue to build product hunt together
> You missed the hard part of actually testing those predictions.

No, I didn't. "Gathering data" includes "testing previous predictions."

> Data science does not bother testing, it just collects more and more data.

You just gave yourself permission to disregard any evidence I present. That level of arrogance should terrify you, once you realize you have that blind spot.

> The people at the soup kitchen

I said "stocking." As in, paying for the building, the lights, and the food.

> My suggestion to you, since you did say that you were here to perhaps learn from my experience, is to be a little more critical of your own understandings

My suggestion to you, is to not call people "silly" when they disagree with your understandings, and disregard any evidence they present.

> If someone told me that the way I think about X was silly

The way you think about the improvements in wealth in the United States in the last twenty years is silly. Specifically, how it impacts the lives of the poor. I'd be glad to continue providing evidence, but I'm not convinced you'll be bothered to investigate it.

> For someone whose been on BBSes for the last 20 years, I'd have thought you've have acquired the same thick skin that I have regarding intellectual discussions.

When I see someone ignoring data, not responding to specific requests for clarification, and throwing insults... I have way less tolerance for the insults.
The percentages detail is very cool, never thought about it! I also think of sin/cos as percentages, but there's one small detail that can be easy to miss. While sine and cosine generate "percentages" between -1 and 1 they don't generate them uniformly, because their derivative is not a linear function! If we were to sample sine or cosine between 0 and PI at uniform intervals we would see that the percentages would "cluster" around the peaks and valleys because that's where the function "decelerates" (or the derivative decreases).

This bit me once!
That's what I was thinking. As a lowest common denominator, bitcoin, or any other thing for that matter, can be accepted as money if the other party accepts it in exchange. If no one accepts it, it is worthless.
As the footnote of the article says, he really lives in Finland (I'd say Lappland, but opinions vary).

That's in the EU, so he's fine.
I bought an iPhone because I'm not as sad as I used to be
US Researchers Make Plutonium-238 for First Time in 27 Years
Okay, well, first off, keep in mind that I'm a curmudgeon when it comes to the web and generally dislike more things about the modern web than other people, so I don't really fault you for just writing me off and ignoring all of this. That being said, here are, in my opinion, the remaining awful things about your web site.

1. The loading animation. I did not wait for your page to load in order to wait for your page to load. Also, if I have JavaScript disabled or JavaScript breaks for some reason, all I can see is that loading animation - absolutely zero of your front page content.

2. The text scrolls up into the middle of the page. Nothing should move on your page without my permission.

3. The fading in/out red text. See 2.

4. The spastic dots/lines following the pointer around above the globe image. See 2.

5. As I scroll, the bar at the top hovers over the page content. This breaks PgUp/PgDn behavior, as it covers content, as the height of the page no longer matches the amount of the page that's actually legible. Also, the bar changes size and color. See 2.

6. You're using a custom font. Are the perfectly fine fonts already installed on my system not good enough? Must you really waste my bandwidth and slow down your page loading time for the sake of your brand? Fortunately, you're using one hosted by Google; I have `127.0.0.1 fonts.googleapis.com` in my hosts file, so it actually didn't effect me. I could still see it trying to happen when opening up Web Inspector, though.

7. I'm seeing your total front page weight as 1.82MB. global_map2.png is 512K. essentials.css is 468K - Jesus, that's a lot of CSS. Even the HTML file is 111K - apparently because you're inlining jQuery, on every page, forcing my browser to redownload it for every page load when it could just grab it from cache after the first one.

That's all I'll say for now. I need to get back to work. Hopefully this is of some help, though.

EDIT: Just to balance things out, here's a good thing - you're bouncing users to the HTTPS URL for your site, even when we're not logged in (or about to). Good!
Not having laws to prevent "bad behavior" would make most of the Bay Area NIMBYs heads explode.
Haha. poop()
I know a couple on snapzu:

http://snapzu.com/t/space
http://snapzu.com/t/spacescience
Then let's talk safety. Every pilot in the sky has spent thousands of dollars learning how to handle that craft, compared to most drivers have spent, what, $150, assuming they went for Driver's Ed. They then spent a magnitude more money on the plane, had it inspected so they could fly it, and will be piloting it in the atmosphere where they have a much greater chance of running into an angel than another aircraft en route to a planned destination that everyone within a thousand miles can look up. Compare that to Uber or hell, even driving your own car and tell me which is safer.
Ask HN: Middleman-free sites like hnhiring.me/craigslist to find freelance work?
Hey HN,

I've had good experiences through hnhiring.me and craigslist this last year, but I was wondering if there were any other good sites to browse for freelancing work (software, in my case)?

I'd like to avoid "middleman" services like upwork, as they tend to drive the price down and are saturated with mediocre off-shore contractors.

I recently started a small (currently four-man) software/marketing consultancy based in NYC. The work has been steady, but I've only been able to find a couple good online pipelines that don't go through a middleman service and we'd all love to take on more jobs.

Thanks!
Uncompressed TGA is used for two reasons: Quality (this particular image was going on a screen three stories tall) and, as the other commenter mentioned, the time required to decompress images.

I'm not an expert on the exact architecture, but I'm guessing that with uncompressed TGA you just throw the bits at the GPU and they get displayed, while if you have to uncompress images that first gets handled by the CPU (?).
My thesis was "if the banks use 1% to pay salaries to their employees doesn't mean it's not a loss"

Maybe you meant the thesis I was responding to that banks use 1% to pay salaries.
He's making a database

He's sorting it twice

SELECT * from contacts WHERE

behavior = 'nice'

SQL Clause is coming to town

(Saw it on Facebook, I don't know the source.)
"Arbitration, itself, doesn't seem to be the issue, only the crooked nature of its currant incentives."

I'm curious how you have come to this conclusion, because your first statement seems wrong at face value to me, in that as a basic principle of at least American ideology, Justice is a public affair in that public officials held to a higher standard should preside. I don't think the private arbitration should be outlawed, but I certainly think the full ramifications and explanation of the jurisdictional issues would be explained to those participating. My question would be about the opposite: are there any situations where someone who disagrees with private courts like this gets forced into using that system? How does the move from civil to private work, or do cases like this never touch the civil court and go straight there? In that case, it seems like a lack of backbone from the party to say "no, I'm taking this to civil court".
Hometown friend of Alfred here. He's been producing astounding mélanges of art and logic since the age of 13. This is another great one.
why are you ignoring the opportunity cost of the down payment?
It's possible, and probably advantageous to a point. Eventually you'll hit bottlenecks somewhere, at which point you throw more servers at it.
The world is getting more complex. Here where I live we have a system with a basic 8-10 years of education from years ~6-16, then apprenticeship school or university.

My grandfather had a good standard of income with only apprenticeship (3 years). My father needed apprenticeship + trade school (3 + 2 years) and my generation will probably need a master degree to have the same income level (3 year of preparation + 5 year at the university).

I can only wonder how long my grandchildrens education will be.
>When I'm working in a dynamic language, my concept of type is consciously coming from all the static experience

Because it's fun to have to constantly lookup API docs for whatever API you're using right now to get the exact spelling or naming convention for the class that you're using. And naturally we're all writing unit tests with 100% code coverage so none of those typos ever get in to production.

Dynamic typing works great with simple APIs. Once you have to deal with complex data graphs with heterogeneous types it becomes tedious at best (eg. a simple and well designed GUI library) or a major pain in the ass (eg. Blender Python API)

Oh and let's not even get in to pants on head retarded stuff like monkey patching as a part of regular API (eg. see WAF build system)
Doesn't seem like a fair game. The NIMBYs pretty much always win.
KWM looks like its actually hooking on the window creation event, so it functions like I3/ratpoison/xmonad/dwm/awesome/etc. I don't have a OS X machine to test it out (you'll pry Arch from my cold dead fingers, thank you very much), but it looks like the genuine deal compared to Divvy &co.
Trendy 2015 Christmas Gifts for Women
I think it's really unfocused. It does talk about (perceived) shortcomings of the iPhone, but then it goes on to talk about complementing the iPhone instead of competing with it.

But even if it actually were about beating the iPhone, my question stands. It's an extremely popular product with very high customer satisfaction ratings. We as consumers should be so lucky to have an analogue in other market sectors.

If only, say, cars had the same problem. Or televisions, or shoes, or or or...
Ok I'm going to agree that Flytenow's operation obviously fails the duck test, no sure what they were hoping for. In fact I met with one of the founders when they started and told him no way it was going to fly (pun intended) with the current FAA regulations.

But is the current regulation reasonable? So a private pilot putting 3 pax in the back of his 1956 Skylane on Angel Flight is ok but the same pilot taking people up to circle around their neighborhood is suddenly dangerous? Ah no it perfectly safe if they just smiled and walked away after the flight. But if they offered to chip in for the fuel then they were well into the "danger zone" right?

The way FAA regulates commercial air transport is outdated and harmful for businesses. Here is another example. A 10000 hours commercial pilot who happened to own a brand new twin cannot take paying passengers, that according to the FAA is dangerous. But a 500 hours 18 year old kid with a wet ink on his commercial license taking 10 pax in a beat up C402 is just fine. What's the difference between the two? The latter works for a company that paid slightly over a million dollars to the FAA for the part 135 certificate.

I'm sorry but this regulation makes no sense.
Very nice.

Did you compare OctoWS2811 to any other RGB LED controllers like FadeCandy or PixelPusher?
or as i initially read - "when do we start packing" - i think it'd sound more appropriate here :)
Some people like to have big monitors so that they can fit more code on their screen at once. Instead of getting a bigger screen why not shrink the code?

As a side project I implemented a small text editor in this style. I had a working text editor with the ability to load a file, insert and delete text, scroll around a large file, and save changes. It fit within about 100 lines of concise (but I wouldn't say obfuscated) C.

In the end I decided to reformat it and use my usual style before implementing more features. But it was a good experiment and I now understand the appeal of the ultra-condensed style you see in J, K, some Forth, and some Perl code.
It's been a long time since I've looked into this, so my info may be out of date:

They aren't releasing the data for when these machines are audited for safety/compliance. https://www.oig.dhs.gov/assets/Mgmt/2015/OIG_15-86_May15.pdf
she didn't say they weren't hiring mbas; she said you didn't need an mba to work there or in silicon valley.

i have no idea why anybody cares what this lady says, but this article hasn't accurately addressed her point.
> in fact hashes remain secure under quantum computing.

Hashes will see their security cut in half, in terms of the effort needed to find a pre-image.
(EDIT: security in bits = log of #evaluations needed)

E.g. finding a SHA256 pre-image, which amounts to a search over a space of 2^256 candidates, can be sped up using Grover's algorithm, to roughly 2^128 hash evaluations.
Why would we care about the number of crashed people? You said it yourself, the number of deaths for commercial flight is higher because there are more people on board. If I'm on a plane, I don't care about how likely I am to be one of the people who died in airline crashes this year, I care about how likely it is that this plane is going to crash.
It's effectively zero, so yes. Taking the gun statistic in their blog [0]. Let's say they prevented a total of 5,000 noteworthy things ( that includes their gun statistic). I think that's a reasonable estimate given their figures.

0.000007656967% of the time they did something. In reality it's half of that. In reality of actual danger being present it's even lower than half of that. I'm talking near 7.6e^-8 in rarity.

The odds of being stuck by lightning is higher than the TSA ensuring anyone's safety.

[0] http://blog.tsa.gov/2015/01/tsa-2014-year-in-review.html
Show HN: Should I hit app launched
Slightly pedantic point, but I was under the impression the diff didn't touch real DOM unless there was a change required, and just dirty checked the virtual DOM - ie. doing everything in memory without a bunch of DOM access was where the performance came from?
If it's the primary email on their account, you already can with Gravatar.

https://en.gravatar.com/site/implement/profiles/
Yep, cool footer! http://screenshots.kevinbongart.net/VHUpQ.png
Gusto (YC W12) is hiring exceptional product designers
I agree. It should have a better way of making sure the "best" content for you floats to the top of your list, rather than going by recency.

I'm intrigued by the new recommendations feature though, which might actually be a reasonable way to leverage the social aspect of article sharing. But I continue to lament the lack of a good way to have real discussion.
GA is nowhere near as safe as automobile travel.
> Everybody seems content chasing the iPhone

I think that he starts with a wrong hypothesis
Jack Dorsey's Live Q&A on Product Hunt