skysight-inc/HackerNews huggingface dataset:
I'm going to be purposefully vague to avoid doxxing myself, but it's a lot like the "run" button that compiles the code on the Rust homepage, the difference being that the compiler I'm running is too performance critical to use Emscripten ATM.
Oh, I'd definitely like to avoid a canonization of him if possible. He's anti-gay, anti-climate change, and supports the PATRIOT act. But even if this is just a fed line (and this is definitely possible), just think how many other members of Congress would even be able to deliver such a line or understand it? Of the 99 others, do you think any would understand NAND mirroring? Even on a superficial level?

My broader point remains that in general, Rep. Issa takes the time to analyze things and write about them, often bringing up issues that are otherwise neglected. Even in his support of the PATRIOT act, he lodged unique complaints about the constitutionality of the law under the fourth amendment.
Most exploits tend to be in new code (contrary to popular belief), which in all modern browsers is written in modern C++. The WTF (Blink/WebKit) and the MFBT (Firefox) are state-of-the-art template libraries; you are free to search for those libraries and verify for yourself. New C++11 features such as rvalue references do nothing to avoid memory safety problems; in fact, they make them worse, since "use-after-move" is now a problem whereas it wasn't before.

I know it's hard to believe, but C++ is not memory safe, old C++ or modern C++, in theory or in practice. The new C++ features do effectively nothing to change this. As far as use-after-free goes, C++ basically adds safety over C in two places: (1) reference counting is easier to use and is easier to get right; (2) smart pointers are arguably somewhat less likely to get freed before accessed again due to the destructor rules (though I think (2) may not be true in practice). Browsers have been making use of these two features for a very long time.

Bringing up modern C++ here is "no true Scotsman" unless you can point to a specific C++11 feature that browsers are not using that is a comprehensive solution to the use-after-free vulnerabilities they suffer from. There is no such feature I am aware of.
Is This the FBI's “New” Method for Unlocking the San Bernardino iPhone?
Tesla is burning through massive amounts of cash. They are debt-laden and don't have plans of being profitable until 2020 at the very least, if that's even possible. They need to keep issuing debt in order to stay afloat, so their financial position is tenuous. If anything goes wrong in their execution, they will go bankrupt, so it's a high risk venture to say the least.
> If there's no crew on board then there's no risk to human life or ransom to pay, so the consequences of a pirate attack are lessened.

I don't think this is really true. Each container is worth $20k - $1M,

https://people.hofstra.edu/geotrans/eng/ch3en/conc3en/table_...

so the whole ship of ~10k containers

https://en.wikipedia.org/wiki/Container_ship

would be worth $200M - $1B or more. With 20 or less crew on board, and lives being valued even in the (expensive) US at only ~$10M, it's very likely that the value of the cargo is much higher than the crew. Not to mention the cost of the boat itself, which can exceed $100M.

Those numbers seem to be confirmed by this talk

http://static1.1.sqspcdn.com/static/f/1340097/17625392/13341...
> The low end luxury market are engineers, doctors, etc. and they will seriously consider buying a minivan or a SUV or whatever instead.

I would say this is a big "it depends". I think I'm in that low-end luxury market. I paid 36k for my car, when all is said and done. I absolutely did not consider minivans or SUVs, and for one really big reason: I don't have kids. Kids aren't even on the horizon. When I look at minivans and SUVs, I think of mobiles that, while great people movers are, generally, not very fun cars to drive (there are some amazing Mazdas and Acuras in this collection, though).

I bought a Subaru WRX, because I like the way it feels; but, I am VERY excited about this new Tesla, and I completely believe that the next car I purchase, bar getting a huge amount of money that I can choose to not be practical with, is going to be an electric card, and is also probably going to be a Tesla.

I have a friend who owns a 90k Infiniti. He prefers luxury more than I do; but, he's 100% on the Tesla bandwagon and is very excited at the prospect of owning one. He'll be one of the first in line when they announce the price.

I have another friend, similar market. He owns an Audi ... A5? S5?

Barring my infiniti-owning friend, we are people that like cars and want a little extra. We definitely do exist, and I suspect many of us will be looking very intently at that Tesla.
Try it with the current version.

If you disable access to contacts, all it does is complain about access with no way to bypass.
Essentially all JS engines implement string concatenation lazily as ropes so there isn't much difference.
I ask this from a position of seeking knowledge rather than being adversarial, the discussions on undefined behaviour from a C language perspective always seem muddled to me between what's undefined at the C language level such that a compiler might take advantage of it and produce results that would be unexpected looking at the code, vs. the machine code generated faithfully represents the language statements but a bug may be present when processing some external input at runtime.

If the inputs here are coming from something external to the program, such that the compiler can't know the value of x then the machine code should be faithful to the language statements, it's a bug if overflow occurs which may have other runtime implications, but the compiler isn't going to remove some chunk of code, etc. because of it.

From their testing page SQLite say they also test boundary conditions (I don't know to what granularity that is though) which which may catch something like this, which is agreeing that instruction level coverage isn't enough. They also run their tests with all the various sanitisers enabled.

Isn't this the same case in Rust, the non-release builds would need to see a suitable test case for the overflow check to cause a panic.

I guess I'm asking is this example relevant to concerns about undefined behaviour and optimising compilers vs. Rust? Since the function is input value dependent in practice isn't this more like implementation defined behaviour at runtime, in that a platform will alway provide a consistent behaviour, e.g. overflow, trap, saturate, etc.?

I've followed regehr's blog for a few years, I've read a lot about Rust, but I'm mostly working in higher level dynamic languages and don't have a lot of hands on experience with C or Rust and just wondering if I'm missing some subtlety here.
FWIW this is exactly how my last Google interview went down. So expect facts, even if wrapped in a satire? :)
This is satire btw.
Why don't people just use lodash?

https://lodash.com/docs#padStart

It's well-tested, well-maintained, performant, with good documentation and has custom-build to leave out functions you don't need.
You should greatly thank him for highlighting the flaws in your system if this caused significant issues.
It's a defensive tactic but an offensive strategy.

No, not that kind of offensive. I gave the larping.org guy $10 for legal fees, even though LARPers are strange folk unlike us normal, sane tabletop RPG players.
I believe moxie disavowed knowing how well Axoltol is implemented in Whatsapp. Plus E2E is not available on iOS.
Because of economies of scale bandwidth in a datacenter is always going to be substantially cheaper than bandwidth in homes. Connecting thousands of homes to an internet backbone requires much more infrastructure than connecting one datacenter.
This will become easier with rollup, webpack@2, and so on, which can effectively reduce the penalty of including large modules like lodash by tree-shaking out all of the parts you don't use. I would expect many more utility libraries to then be aggregated into a single package/repo and for users to simply pick and choose functions at will.
What he did is analogous to someone breaching a trust system by doing something untrustworthy. If the argument is we shouldn't have trust systems, fucking bravo. Isn't the world a great place?
Yes, did some research and found that the Python run time is the fastest to start up of the various options - all it really does is start up, call the C program, then shut down (<10ms to get to the subprocess.call() if memory serves).
I wish I could add more, but you've nailed it. Upvoted!
Not everyone needs websockets, and only the legitimate administrator needs to know the true IP address for ssh. Plenty of websites can be perfectly hidden behind CloudFlare as long as they don't have an MX record or unused subdomain that points to the same server.
great answer
Here's a highly downloaded 11 line module with lots of dependents.

https://www.npmjs.com/package/escape-string-regexp

I stopped searching at 1.

I've certainly benefitted from the vast ecosystem of npm. I greatly appreciate the work that goes into making this ecosystem what it is. However, I think we need to be a bit more critical when it comes to acquiring dependencies. Especially authors of very prominent packages.

Fun fact: one of my projects (a web api) depends on over 700 unique name/version modules.

Fellow programmers. This is embarrassing.
I loved so much this game that I stopped games! I could see myself spending days and days playing games like this and doing nothing in my life.

Does it have a version in other languages? I'd love to play it with my kids.
That's amazing. I had no idea things were so bad.
Sorry about the contributions text - that's a little unartfully expressed. Our plan in open sourcing these extensions was both to provide some useful examples of extending Visual Studio and to be a starting point for others to create and manage new extensions based on this work.

We wanted to get these out as open source first and foremost, and we're really interested in learning how people use them. Our conservatism in accepting contributions springs out of that goal. If it's clear that there's strong interest in developing these further, we're willing to revisit that.

And just in response to the trivia, we switched the entire Visual Studio repo to git, hosted on Visual Studio Team Services, after we shipped Visual Studio 2015. We've been developing VS-PPT in that repo before moving it to GitHub, so hopefully that explains the long gap in the commit history.

We're listening! Thanks, Tim Sneath | Visual Studio Team
A more interesting question: What do you think the investors lied to you about? What do you think they kept to themselves?
Yeah, it's one of Rust's strongest features, as it allows progressive migration of native code, and also allows Rust to serve as a fast/low-overhead extension language for Ruby and Python (etc.).

More details:

- http://doc.rust-lang.org/book/ffi.html#calling-rust-code-fro...
- http://doc.rust-lang.org/1.6.0/book/rust-inside-other-langua...
A friend told me it's just threads and queues
Might that also lead to reduced stresses on the vessel, and less chance of something breaking? A failure might mean the whole lot ending up on the bottom of the sea?
Fair enough. I would posit that he didn't ever expect that the npm folks would undo his actions, even if his decisions were/seemed rash.
> Barring my infiniti-owning friend, we are people that like cars and want a little extra. We definitely do exist, and I suspect many of us will be looking very intently at that Tesla.

Yes but is there 175k every year such as the article implies? I'm skeptical.

I can believe there is going to be 100k in sales but that isn't a market dominating product. I could even see it hitting 200k that first year due to pent up demand but it won't sustain it.
That much makes sense, but if I understand GGGP's example properly, they are talking about pruning unused internal references within a module, but GGP's response implies that somehow Rollup will prune those out.
Notice that I didn't talk about the node package manager, but about the author and the company NPM Inc. (and their registry service).

It's not that your "build got broken", it's that you had a broken build process. You are the one at fault. You chose (perhaps unconciously) to rely on various entities, their services, their whims, and they proved to be unreliable.

The simplest solution for those who write an application is to commit the dependencies into the repository as well. This significantly lowers the amount of entities relied upon when building it. (Alternatively, have your own registry, whatever.)

Then you can discuss issues like the ideal module granularity, ethics of this or that actor, names and trademarks, etc. without worrying about your "broken build".
I had that same thought the other day. We are ending up with thousands of 11-line "micro-libraries" that just cause huge dependency issues and have limited usefulness. Like you said, lodash is well-tested, well-maintained and performant with good docs. So why isn't it just used more by these libraries? It shouldn't be a size problem either, if you really want to you can require individual lodash functions in node.
This is obvious in the workplace. Here are some of the things that lack of power/autonomy will lead to:

- Being forced to do work assigned to someone else.

- Being forced to do work for which someone else will receive credit or compensation

- Being forced to appear as though under someone else's control (other than direct manager)

- Being forced to do the more dangerous, risky, difficult, or thankless work

- Being forced to do work far below one's qualifications

- Being forced to take over failed projects or projects
that have already been rejected by upper management.
I didn't even read the article because I know there is no secret.

We don't hire the best people. We hire average people, some good people, some great people, some mediocre people, and some people who aren't very good at their jobs. Some of those mediocre and average people turn out to be great people after all. There's no secret to it. We like telling ourselves there is a secret because everyone likes to feel special and we think if we can mirror other companies that we think are successful then we can be successful just like they were.

In the end, you have people working with people. If you're fortunate, you get the right people interviewing the right person at the right time, and you get a great hire. At best, you can filter out the obviously bad ones. The rest, you'll find out about as you go. Some will surprise you, some will meet your expectations, and some will be disasters. Fire the bad ones; coach and mentor the average ones; keep track of the great ones.

Go build some shit with people you like building shit with and stop trying to figure out how to make hiring objective. You can't.
This won't work when I need to scrape 100,000 pages in an hour.
I don't think the AMA has much affect on employment of older doctors. He's right - older doctors are in demand because they're assumed to have acquired some wisdom along the way. The same is not true of software developers.
What Is a Robot?
People with experience in software wouldn't likely confuse the two pieces of software. But most people think "computers" and stop there. Most people visiting an app store would see "Windows" for 99 cents, buy it, then complain when it wasn't Microsoft Windows. They wouldn't read descriptions, and they don't know what an operating system is.

Confusion. Microsoft is very likely to prevail in the infringement lawsuit.
Is there pricing information anywhere? I couldn't find it.
Alpha Airlines Flight 243
OG Fuel TV and OG MTV = Plaedio
A very interesting and informative post, as to be expected from someone like bunnie.
Uber drags Ola to court over 'false bookings'
They are going to face very tough competition in this market against companies with a lot more money to burn and, frankly, likely a better product not to mention a far more established support network.

The S was an amazing consumerist statement that unlocked a class of people willing to spend 100k+ on a car because of its Eco-cache. For several years I thought it would be my next vehicle, then I watched the age, saw their poor quality interiors and decided I could get a lot more from BMW at half the cost.

I'm the person who would buy a Model 3, as I currently own a BMW Gran Coupe. But look at a Designo AMG C Class coupe or an M4. These offer thrilling rides, high quality interiors, and handling the current S doesn't even offer short of the D version. The Model 3 will have to be down market from there, putting them way behind the current market offering. This is a high competition low margin arena, and they can't even profit in the high margin low competition space yet.

I hope the Model 3 succeeds, but it will have to be amazing.
FYI, the article is satire. Not reading it will miss the point :-)
How many cards do you have in your list? I have a list of 75 cards and I'm not observing the lazy loading you describe.
there isn't a public pricing page yet (i need to get to it), but once you sign up, you can find it.

There's a free plan (limited to 5 powers that you can add to nestor). After that, plans start at 25$ monthly
So true. I had an Amazon interview where I wanted to hang up. There were moments where I would get questioned or berated for not using such great AWS tech like Opsworks and Cloudformation. Instead of being impressed with my completely valid approach they fixated on the fact I didn't use their stuff and it became a bit combative/snarky. So Amazon certainly isn't for me. Thanks for EC2 and two day shipping though.
Maybe he wants the developer community to class action kik.
I think you just got harvested!
Do you think you could've done the YC program remotely via the Fellowship?

I've thought on applying but sometimes circumstances make it hard to been able to move there.

If you had joined the YC Fellowship instead, what do you think could've been different?

Also, kudos! and thanks for the advice.
Deploying Parse Server on ContainerShip
Zero is probably the closest to that:

http://www.zeromotorcycles.com/zero-s/

The motorcycle market is approximately 1/30 the volume (in terms dollars even less) of the automobile market.
The tight-coupling with Heroku is a huge drawback.
I just don't understand how "std::string of constant size" leads to the compiler inferring that a variable is undefined along a particular code path. In particular, on the not-taken code path, what is the uninitialized variable being branched on?

Edit: Is it figuring out that the pointer in the string object is uninitialized? That doesn't seem any easier than reasoning about the length value, and I don't see how it would lead to "br undef".
Is that situation the same as a outsiders spamming? I don't see the connection.
This is such a skewed portrait I would've thought you were looking through a fisheye lens.

You're making it sound as if Tesla is riding the edge of bankruptcy, and Elon Musk is up late fretting over spreadsheets wondering where he'll find the money to make payroll.

On the contrary to your unsourced assertion that they won't be profitable until 2020, he just said in the last quarterly investors' call that Tesla was likely to be profitable this year. [1]

As for "burning through massive amounts of cash," again you're making it sound like money is just slipping through their fingers with no return. This is such a misleading sentence on its own. Yes, they have enormous capital expenditures because they're doing something extremely difficult that requires the construction of enormous facilities and requires immense amounts of engineering work. And by all accounts, given that they're now selling about 50,000 cards a year (sorry, how many were they selling two years ago? four years ago? looks like the number is going up) and given the reviews of the S and the X, they're doing a superb job delivering results from those expenditures. Their expenditures are not "out of control" nor unplanned-- they're spending exactly what they need to in order to accomplish a near-impossible goal.

Given where they've gone from 2009 to 2016, you think that between now and 2020 it's all going to collapse in on itself, the Model 3 will reveal itself to be a poorly designed flop that few will buy, or they'll find themselves unable to actually manufacture it? Where exactly are you seeing evidence of a downward trend or a failure waiting to happen?

You sound like one of those people on the radio that proclaim apocalyptic double-meaning in random numbers they've taken out of the Bible.

[1] http://www.reuters.com/article/us-tesla-results-idUSKCN0VJ2J...
Hah, “indispensable”. It pads strings. Here, I wrote an alternative:

function padLeft(s, width, padCharacter) {
var d = width - s.length;

return d <= 0 ?
s :
(padCharacter || " ").repeat(d) + s;
}
Why empty state plays a bigger role in UX than you think
kik.com is a product/service. kik the library is a product/service.
This is really neat, but isn't it super inefficient? The color quality is pretty poor and I'm fairly certain it can't take advantage of hardware acceleration.

It's neat to put graphics on your old DEC terminals, it's cool to have as a hack. But re-implementing it into new tech?

I dunno. I'd really like to see an mmap'd YUV or RGB buffer in the terminal being read from a pipe/file/memory area, because I feel like that might be a little more efficient. Or, hell, what if we got a straight up GL context? That could seriously be interesting.
http://www.fool.com/investing/general/2016/01/29/will-tesla-...

says that they plan to be cashflow positive by Q3 this year.

http://www.forbes.com/sites/greatspeculations/2016/02/11/tes...

says that they are cashflow positive in "core operations related to the Model S. Which can be defined as the production and distribution of the vehicle, and sales of the premium sedan to its leasing partners. This excludes costs incurred in the build out of service centers, production facilities, stores and charging stations."
SunEdison: How Investors Can Part the Clouds
Huh, really? That's strange. I just checked both @npmjs and @izs and don't see any comment on the merits of the complaint now.
Conference Summary: Great Wide Open [Moziilla, Treasure Data]
Andiamo – War for Tech Talent
That'd be fine if use-after-free was a corner case that doesn't show up often in practice, but every single exploit at Pwn2Own this year was UAF…
conda env also installs other dependencies for code. Really, the whole point of it all is that conda replaces pip and virtualenv.

Conda manages more than just Python packages, but other dependencies as well. For example, here's list of packages in a new environment I created with

$ conda create -n hn python
$ source activate hn
$ conda list -c

openssl-1.0.2g-0
pip-8.1.1-py35_0
python-3.5.1-0
readline-6.2-2
setuptools-20.3-py35_0
sqlite-3.9.2-0
tk-8.5.18-0
wheel-0.29.0-py35_0
xz-5.0.5-1
zlib-1.2.8-0

setuptools and wheel are the only Python packages installed. The others are non-Python packages that conda is managing for my environment.

For all the talk of vendoring in package manager tools these days, I really, really like the way conda manages this stuff.
The parents parent comment discusses keyboard drivers. They wouldn't operate very well without them.
How to rip DVD to Zune
> but my thoughts right now are ... "I would never use NPM again if I knew how catastrophically badly designed it is"

Then the protest was effective.
Oh those names bring memories.

Grim Fandango, Curse of MI and Sam and max especially. Also Indiana Jones and the Fate of Atlantis.

I know a lot of that is pure nostalgia, but I sometimes fire them again and even finish them up yet again and wow. It's just art. It's like re-reading a book I guess.