skysight-inc/HackerNews huggingface dataset:
> Consider the case of a typical web dev shop that hires a developer who thinks escaping is a good solution to SQL injection. It might get snuck past code review if you're unlucky.
> There are static analysis tools that can identify such problems ... sometimes ... maybe ... depending on the language and frameworks in use.

Analysis tools are the wrong approach - that code should be simply impossible if you're typing things correctly, and inadequately typed code should be very obvious in code review.

> And most devs can't simply produce such a tool if there isn't one on the market because that's not what they're being paid to do.

Most devs could write such a thing if the company told them to. The reason "that's not what they're being paid to do" comes down to process.
I bet we'll be seeing a lot more of Typescript in the next few years, seeing as it's the default language that is suggested in Angular 2's documentation. I find it odd that Dart wasn't the default language of choice for Angular 2 (although it is fully supported) seeing as Google is behind both projects. I think it really boils down to what the author wrote here: "Dart is not JavaScript. TypeScript is." At the end of the day more people are going to want to use what they are already more familiar with, and it's really not necessary to throw out years and years of progress we have made on JS.
How am I able to compare this "interest free" loan with a small business line of credit from the bank?

If you're able to get a small business line of credit from your bank, take that, it will invariably be superior. Sadly, that product has virtually disappeared from the marketplace for small businesses with revenue less than ~$1 million. The underwriting costs are too high, the product is too risky, and the revenue potential is too low. The bank will, instead, steer you towards credit cards. Credit cards are a wonderful product but they don't substitute for the need.

There exist a bunch of alternative lenders who are eating this space up with pricey-products-which-actually-get-issued. OnDeck gives fairly uncomplicated lines of credit, for example. Their stock offer is 36%. (I have one, and occasionally use it.) Kabbage (love the name) does a merchant cash advance with implied APRs which are even higher. There are more costly options still, including traditional hard-money lenders and merchant cash advance providers.

This offering is closest in character to Paypal Working Capital.
Ask HN: Share companies you had worst interview experience with
One of the worst experiences that happens and I am seeing more of it is either companies going completely unresponsive or cold rejections after asking the candidate to be deeply invested.

One such experience was from slack. Huge time consuming coding exercise followed by long silence and unexplained cold(no-reply) rejection.
As a Man City fan, it's somehow acceptable that we're never considered a big club. We've finished top 3 in the last 5 years, won multiple domestic titles and on track for a 6th yet you'd have English media dubbing our historic CL tie against PSG, El Cashico.

The amount of pundits (former Liverpool, United players) in the media is indeed an important reason for that narrative.
I cannot recommend Roadside Picnic highly enough. Possibly one of the greatest science fiction novellas ever written.
The Princeton Companion Is Back. Sort Of
Not really, no. There are laws in place to force transparency in stuff like this, and rightfully so.
> What's their big problem with the established headphone connector? Well, it's an analog, single-purpose port on digital devices that are now defined by their multipurpose efficiency.

You know, we could remove that huge screen using that same rationale. No more lugging around that huge 6" bulky old thing! Now your phone is as small as a chicklet!
When I was working on multi-platform console engines, I had no choice but to compile with several highly varying compilers. It teaches you very quickly how quietly compiler-specific extensions and quirks work their way into your code.

Also, different dev environments offer different tools. A nice benefit of running in lots of environments was that I often could pick between the best tools of any platform whenever I had a problem they could help solve.
The type definitions for some libraries aren't super fleshed out, which prevents you from doing some of the optimal styles possible with those libraries. I ran into problems with both lodash and ramda with TypeScript so far.

Other than those nuisances, I've grown to like using TypeScript a lot.
Understanding Characters in C
It's difficult. There are surprisingly few decent ad-hoc work places in London. I suggest looking at http://workhardanywhere.com
Ha! In general I assume that the NSA is ahead in many areas that remain classified.
Understand complex SQL queries within seconds – launching private beta
You do not need to be in position of power to refer someone.
This sounds a lot like confirmation bias. You enumerated what you what you do when in these situations, and that your expectations of candidates are closely aligned to your own behaviors. There doesn't seem to be much room for understanding why a candidate's behaviors don't align with yours, or thought for bridging that gap.
I think that the major concentration of PED issues is in sports that are focused on individual performances, eg athletics, cycling, baseball. The effects of PEDs (unless it's a team wide programme) have much less impact in team sports. It's also much, much harder to keep secret. People and players with axes to grind and all that.

That's not to say there isn't drug taking going on; but to imply that's the reason for Leicester's success this season is indeed controversial, and as far as I can see, without merit.

Chelsea have had a startling decline from champions last year to mid table fodder, this year. Does that mean they've stopped doping?
If you're not interested in performance, but are interested in working code, then why wouldn't you pick something other than C/C++?
Platform for new NASA rocket rolls through Titusville
Present code with style
I think he was referring to this guy's work: http://www.pitt.edu/~jeffcohn/
I often wonder about this. Four things are needed to truly build advanced AI's (read deep learning, deep reinforcement learning): new algorithms, complex data sets, and advanced GPU based computing (optimally GPU in any case) but also an open community.

I think AI research is one of the most open, and this openness is really at the center of its growth. So I am happy OpenAI has started since it is within this vein of sharing that the community has already built. But I certainly don't fully grasp how it can open AI to the world unless it can share rather valuable data sets (often impossible to get data such as personal health record), and make computation much much cheaper.

Let me illustrate my concern; Alphago required not just 30m game sets and complex understanding of both a policy and value network design, but also 1000 CPU and 200+ GPU instances. Something on the order of a few million dollars to build and utilize.

I look forward to the work coming from OpenAI. I hope it lives up to the hype. But I believe AI will more than likely remain squarely in large enterprise since the cost of developing applications will be high for the short and possibly for the near long term.
He's decent but Leicester's defence is certainly a key reason for him to have impressive stats. He isn't as good as Lloris or De Gea or even Hart. Forster would arguably be better than him if looked at objectively.
Yes, the differences between C++14 and 98 are night-and-day different. Quite a few important language features, and plenty of new libraries (including threading and lambdas).

There aren't any (AFAIK) explicit breaks of '98 code in '14. So the theory is that code should compile with the new compiler fine, but you'll likely hit some issues.

Check out Scott Meyers book: Effective Modern C++ for the deltas.
The way I see it is that its about exposure.

If you contribute to open source, your name and work are out there. People can find out about you and see some of your work.

There are other ways than contributing to open source too. For example, I've got a number of offers because I run a local programming language meetup.

Basically anything that puts your name out there will help get offers. If nobody knows you exist, they can't offer you jobs. That, I think, is where open source can help a lot.
Is it possible to downgrade the OS on an iPhone? Is that a viable option if the newer OS is very slow on an older phone?
Hidden motors in cycling: Van den Dreissche banned for 6 years, titles stripped
Elite American Men Are Obsessed with Work
Yes, it's really odd! I used to work at St.Oberholz in Berlin. It was open until midnight and had a fantastic vibe.

Thanks for the link but I don't have a device to download the 'app' to, so the search continues...
Remember saw a job ads for PDP11 programmer to work on Nuclear power related project a few months ago.

One thing for sure: you can't infect a PDP11 system with Windows or Dos Virus, nor can one plug in an USB.
another similar experience that was submitted today to HN:
https://medium.com/@evnowandforever/f-you-i-quit-hiring-is-b...
http://www.plantation-productions.com/Webster/www.artofasm.c...
Just add something like language:Python and you're good to go. :)
How does Windows Explorer calculate “Size on disk”?
Is Typescript/Babel an either/or choice?

ES6 is non-negotiable. I understand the basic premise behind Typescript. Would I "switch" from Babel to Typescript and get arrow functions and string interpolation through Typescript somehow?
Wow this is such a strong title. There's no winning. Use the right tool for the right job.

Although every big project I take these days I prefer to write in TypeScript, I would honestly not use it if I have a small static landing page with an AJAX ticker or something. It would be overkill.
Do you not find it strange, or at least confusing, that you're arguing a point here that is predicated on studying for an interview, rather than the actual position?

"This person didn't study for the interview, so what did they expect to happen?" Oh, I don't know, maybe to be asked questions directly related to the position, amongst other things.
>where do you learn advanced stuff if not in a graduate school?

From a degree-less "researcher" whose published in neuroimage, i'd say, wherever you can and as you learn more you get better at knowing where to start when searching/who to talk to/who to work with.

>Academia undoubtedly sucks if one mainly takes money or career prospects into account.

Or tired of trying to get your lab to work on more on the cutting edge of the technology vs the grant hamster wheel and status games or sucking up to people who clearly don't have any understanding of modern technology/physics/mathematics/techniques on a intimate level and squandering resources because they can, and figure you can get what you want done faster with more resources you can more directly allocate.

>…learning without the help of a community and a mentor is hard.

It's going to be "hard" no matter what path you take imo, but that what makes the journey of knowledge fun, because of that small chance you might actually figure something out you never knew before is worth ones time?
It's not unnecessary if ES is just one of the endpoints. Kafka shines because it can accommodate a ton of consumers - so you can write once to kafka and then use it populate ES, databases, whatever. Furthermore, what happens if you need to re-index (say, if you update a mapping to an existing object)? It becomes trivial to reindex by replaying all the data from Kafka into ES thus saving you a lot of time.

If you are just dumping into ES, then yes, probably not the best tool (though it wouldn't necessarily hurt) - just use the HTTP API for that. However if you want to build a robust pipeline for multiple services or think you'll be needing to scale the feed into ES, Kafka is useful.
It also depends a little bit on your style of programming. For example, in C code, I personally like using gcc extensions like nested functions. As far as I know this is not supported by clang (but perhaps someone more knowledgeble can chime in).
Having family members who are all three of those... yes. They, unfortunately perhaps, are. They all have to have portfolios of some kind to prove their ability.

It perhaps depends on the specifics of the jobs you go for. For example, if you're a musician producing audio for eg film, then you definitely are expected to have a portfolio, but if you go out and play for an audience, then you probably don't.
Surely they'll offer a dongle to give you the old analog jack.

But I'm pretty excited to see what they can do when they inevitably put computation (and networking to an overpowered phone!) inside each ear & the mic (or in the case of wireless headphones, exploit the existing computation to do a little more than shuffle Bluetooth packets).
if main() is throwing you off maybe try python?
The Gold Mine Beneath London's Streets
What about the maze solving question?

Should all front-end developers be able to create a maze solving algorithm on the spot, during an interview, under time pressure?
>If you are going to test my knowledge, at least ask relevant questions for the role.

Even for a front-end developer, I think that algorithms matter, because developers have to understand what they do.

And the OP's solution in O(N2), as well as the other one with hash maps, seem quite bad (it can be done trivially in O(Nlog(N), and optimized to reach O(N))
Dayle Rees launched his newest Laravel book, Code Smart
It's true.

I think we're living in an era of systemic failure of risk analysis. I see it in my company too, where the InfoSec team is basically given free reign, and they're not happy unless every machine is airgapped. At other companies, there is no concept of security at all.

Where is the department that makes the cost/benefit analysis of security measures? I don't see it in government, i don't see it in the private sector.
This is a follow-up to discussions on "mechanical doping" in cycling.

The first story I recall on this topic was in 2010: http://www.theguardian.com/sport/2010/may/19/cycling-motors-...

This is now 6 years later, and we finally have the first pro cyclist banned based on being caught red-handed at an event with a motor in her bicycle.

The type of motor she used was a Vivak, one of these: http://www.vivax-assist.com/en/produkte/vivax-assist-4-0/viv... though probably with a slightly modified button to make it more discreet.
if I went by the story I've lived, I would assume that everyone in America makes six figures.

I appreciate your optimism, but you can't let hope get in the way of data.
To expand on this, it may be useful to consider capitalism as a system of property law and free markets as a system of regulatory law.
How do you deal with the short to mid term skyrocketing prices of everything that gets moved by truck/train/boat (e.g. Food)?
But how should "conservatism" play into faith-in-forensic-evidence? Seems like it's mostly orthogonal.

I suspect that trends of finding against the accused would track the issues well: Scalia was focused on a strict interpretation of the Constitution.
Imagine the logistics of pushing LCARS updates to God-knows-how-many starships and Federation installations.
Arsenal haven't finished in the top two for, like, a decade now? They're currently 3rd and are looking good for a top 4 finish.

How many times have they been the best team in the first half of the season only to fall apart by February?

It's a normal season :(

(For the record: I'm a Swindon fan and like watching Arsenal in the autumn and Liverpool when they're 2-0 down in Europe).
> "hope" does not work in economics. Numbers do, and they do not add up.

Economics is not about math, precise and inevitable. Economics is about people and their social interactions.

Economists try to model social interactions with numbers, but don't mistake the map for the territory.

What does it mean in human terms that Japan has high debt?
Is your argument that Japan will inevitably default? Sophisticated traders are willing to lend more money for 30 years at less than half a percent interest [1], so smart people must judge default risk to be very low.

Is your argument that somehow Japan is doomed because of this debt? Even if they default, what does that really mean on a human level? Would millions starve? Would society collapse?

Maybe Japan's history, customs, language and social cohesion are worth more than you think.

And, just for the record, Western stereotypes of Japan as a collectivist society are no longer true [2].

[1] http://www.bloomberg.com/markets/rates-bonds/government-bond...

[2] http://noahpinionblog.blogspot.com/2015/03/japan-is-not-coll...
What does "still a draft" mean? That a bunch of randos at IETF haven't approved it yet? Three of the most important email providers on the planet sponsored it. It's what's going to happen.
I was under the impression that the whole point of undefined behavior in the spec was to give implementers flexibility. Am I wrong? If not, then it sounds like it's very much in the spirit of the rules.
I think outrage (of which anger is a component) is a natural reaction to someone scamming their way into a position of massive funding that many people are working tirelessly to try to reach.

Saying that people shouldn't be outraged because they will probably fail and be punished is kind of silly. Do we say don't be mad at a murderer just because they are going to go to jail? Punishment or even resolution of a problem doesn't mitigate the emotional reaction to that problem for most people.
See above blog post.
So this is where authoritarianism arose? And it propagated to other places how? Or is this mostly conjecture and lots of guesswork?

I like fantasy and imagination as much as the next person but I think drawing stark conclusions from architecture and "graffiti" should be taken with a grain of salt. And I guess ancient Egyptians were not authoritarian, or, what exactly were they?
Yup, this seems kind of predatory. Instead of honestly answering what the interest rate is or give an equivalent they wave it away with jargon. Answer after answer is just jargon and more jargon. They don't even show what the total amount paid back is! They instead show very clearly they keep drinking your sales until they decide to stop.
Designing with Ugly Content
Be the Better Rails Developer
Careful, not everyone agrees that the ends justify the means
It's same everywhere.
Pearson barely managed to avoid relegation. I think it was more the case of delaying what would have been a standard mid-season sacking [or two or three] at other clubs building a vacation house at the bottom of the table.
No, apple stops signing the iOS images a few weeks after a new release.

There is a method to go back to iOS6 if you have a jailbroken device, but its complex.
Who gives a sh*t?
SpaceX
IIRC, the Space Shuttle had four identical computers: three ran the same (full-featured) software and detected errors with a voting algorithm; the fourth ran different (minimally-featured) software developed by a separate team as a final backup.

The fourth computer's software was only sufficient to abort the mission and return the shuttle to the Earth. IIRC, they never had to use it.
This article is just CYA by the True Scotsmen of Silicon Valley.
Data Science from Scratch with Python [audio]
Ask HN: How quickly does your site load? (Mine is 0.3 secs)
My site loads in 0.3 secs according to GTMetrics...

How fast does your site load? Trying to benchmark performance against other sites.
I am a big fan of Nim. It's one of the few languages that gets me excited lately as it feels like you can do pretty much anything that you could do in C++ but in simplified code and shorter dev times.
I read (can't remember where) that one of the brothers had a friend who had been evacuated from a town near Chelyabinsk 65 which was the site of a very serious accident in 1957, actually worse in some ways than Chernobyl. He had described the contaminated zone around there in graphic detail and the Strugatskys had used the idea for an alien visitation.
Spain's Cursed Village of Witches
The specific thing that went wrong was trying to use the homebrew version. 4 just worked out of the box, no hassle. I do of course have access to a Linux machine, but it'd be convenient to do development on my Mac as well. I'm willing to give it another shot but need to be convinced it's worthwhile.
Yup. But the thing I meant is that you illustrate things, not actually code your application code.
I re-read this sentence several times, and I'm still not sure how I should interpret it. What is Scalia skeptical of? Is he skeptical that there is any risk, or is he skeptical of the crime labs?

Maybe my reading comprehension isn't up to snuff, but I think when you're trying to point out a (putative) paradox, you should avoid stacking too many clauses so that it becomes fuzzy which of those is where you see the conflict.
Powering Up with React
It's low, but it's "continuing".
Blue fabric dyes were rare and very expensive until aniline and its colored derivatives were synthesized. There was Tyrian purple and royal blue [1], both derived from marine mollusks.

[1] https://en.wikipedia.org/wiki/Tyrian_purple
It's great language for shifting blame as well. Instead of a business admitting they couldn't retain an employee, which would imply that they need to look at what they are doing. By calling it poaching, they are now a victim of being poached from, and less responsible for what happened. I put this next to the people who say 'can't find anyone who does x' but who never admit it is because of the salary they are paying.
I always expected steganography to be used to encode a compressed and encrypted datastream, not uncompressed images. Such a compressed and encrypted datastream should be indistinguishable from noise, so not show in this kind of analysis.

My pet idea for doing steganography was to use nonstandard or suboptimal encoding sequences. For compressed data formats, including images, music, video, and general files, there is almost always a choice of various encodings which will decompress to the same result. Systematically varying a compression choice gives an invisible way to encode data.
Code-driven art exhibition
I didn't say bugs, I said what unit testing does.
How my Twitter bot makes personalised animated GIFs
What do they do if all three disagree?
If one replaces two lines of code with one line of code, there are three lines of code in the world. Information cannot be destroyed.
It seems to me that this idea of portability is relevant to almost nobody

Most regular people I know enjoy Facebook, and are accustomed to how it works.

I'm curious about where you see the demand?
There are no promising solutions to this problem. Email is always going to be hazardous.
Some web art.
Out of one bicycle, many
Lifelong Liverpool supporter here. I think anyone that supports a team not in contention wants Leicester to win the league. It will be really good for football.
Windows 7 Home Basic Product Key 64/32 Bit Free Download
I am pretty sure they knew. I am just surprised that they aren't horrified. If I were the head of an organization that sends innocent people to death (while the real killer is free) I would do my best to avoid this.
Depends on what the goals are.

Among other things Apollo was also really expensive propaganda with a lasting impact. In that context it worked well. 50 years later and the US is still the country that put a man on the moon where probes are generally forgotten outside of Voyager.

Energy research similarly has a lot of indirect value outside of simply changing local emissions. By reducing costs you can push world wide adoption through economics not just politics. And create economic incentives to keep improving things over the long term. That's a lot of leverage and well past what direct spending on 'clean' energy could have achieved in the 1980-2000 timespan.
Building the simplest Go static analysis tool, vendorcheck
Bleu foncé meme.