skysight-inc/HackerNews huggingface dataset:
These are all errors that would be impossible in a language with, oh, bounds checking.

There may be ranges of security-critical code that make sense to write in C, for example ensuring that algorithms run in constant time, although with modern compilers I have difficulty trusting that the compiler won't accidentally optimize away the constant-time-ness.

Surely ASN.1 encoding isn't part of that range, however?
Full length, detailed practice design briefs to get creative with
> I don't think I can rent a house in York for a year for that kind of money.

> God I despise this world so much.

The opportunity/better-living delta between big cities and other smaller ones have risen a lot over decades and centuries. There is much greater affordability of food, healthcare, basic education and better employment. But with the rise in population there limits on housing. Everyone wants a piece of same pie and there are economic consequences of that.

The next big disruption would be to break this trend. Use technology with a social/political movement to get the benefit of affordable food, healthcare, education and employment while living in non urban areas.
There are plenty of biological changes from ~18-25 which impact reasoning. http://www.npr.org/templates/story/story.php?storyId=1411647...

In the end all society's have a baby-elder process with many stages. We let 15 year old's risk their and others lives driving multi thousand pound vehicles at 70+MPH. We keep prescription medication behind many additional hoops even for well educated 60 year old's.

IMO, the real difference is how much education people need. A 15 year old can dig a ditch just fine, but cancer research takes quite a bit more. In the end society simply values 15 year old's time less.
Just the C usual stuff, but good bone coders use all the warnings and analyzers from gcc and clang and never commit such errors.
Bell Labs almost invented the Internet in 1964
The claim of the article is that we never see regular people with ordinary jobs except for "police precincts, crime-and-forensics teams and legal-medical-Beltway dramas".

The counterexamples you came up with are shows where the characters are police, politicians and drug dealers, and you had to reach back to a show that has been off the air for 8 years to even find those. Doesn't that kind of demonstrate the article's point?
Stealing food and destruction of private property are wildly different charges. And hopefully if you were a businessman you'd be smart enough to have insurance....
<austinPowers> What does all mean Basil? </austinPowers>
That one never made sense to me.. she was way too hot for him.
Recent click-bait discussion from 4 days ago https://news.ycombinator.com/item?id=11589523
and for the DCPU fans, e8vm also has its own small mips-like instruction set, which is currently the only target "platform" that my compiler supports.
A self-contained project that gives the candidate room to demonstrate a basic grasp on core skills. It should take no more than an hour or 2 hours at most if the candidate chooses to stay within the constraints of the project (in my experience, candidates will often throw in a few extra features since we're not monopolizing their time with a demanding list of requirements, which provides really awesome insight into the candidate). In most cases, if the candidate is capable of a simple project like that, they'd be equally capable of a larger project, and there's no use wasting anyone's time on a larger thing (unless you're focusing on the wrong stuff, like specific knowledge of one particular library).

For my purposes, I like variations on a project that asks them to implement a very basic listing call from a public API. I let them use any language they want. This shows that they can put together a project in some language, look up API and/or library documentation, provision an API key, reference external API docs and code a function that reads against it. I understand that Compose covers a different space and would need to tailor a different minimalist project.

For me, if they're capable of this minimalist code task, it demonstrates basic competency and filters out almost all of the guys that aren't worth wasting time on. It doesn't demand too much of their time and allows them maximum freedom, which allows us to see a lot of information not only about their organizational skills but also about their code ideals. It doesn't penalize a great asset for not having run across a specific language, platform, library, algorithm, or data structure in his/her past; those things can be learned quickly by good candidates. It doesn't depend on knowledge of trivia or number of times they've seen the problem in past interviews/tests. It's not overly academic and doesn't depend on how long it's been since they reviewed their compsci textbook.

The rest of the information needed to make a hiring decision is derived from an extensive discussion on their background in the field, their attitude and goals, and their immediately relevant experience.
Cybersecurity and the Psychology of Whaling
Unfortunately in the US, most grocers and corporate stores do not donate their food. They lock the dumpster they throw expired food in. I've heard of places that bleach their dumpsters so people don't break in to eat the food.

I do know of a handful of shops that donate, though. They tend to be much smaller.
>the insistence on using JavaScript in lieu of helpful abstractions

I appreciate this. The javascript world already has too many abstractions.

>Angular 1: by far the easiest and most intuitive.

How on earth do you find Angular more intuitive than React?

Angular is a behemoth compared to React. This is like saying Rust is easier and more intuitive than Go.

Angular 2 forced me to switch to React because it made me weary of Angular 3 and the new abstractions that that will bring.

It seems also that a lot more big sites are choosing react over angular and I see a lot more job postings for react devs.
I get a lot of my education through coding "useless stuff" so it always becomes a good way to learn something or other. That being said, several hybrid mobile apps that are no longer living come to mind.

Also, an NES emulator that resides at http://www.playnesta.com - if you're on Chrome or even mobile it's pretty slick.
Reread what I said, I was talking about the American definition "middle class," and the bastardisation of the word, not the British definition. I also said a nurse and teacher couple (household), not each of them individually.

As an American I wouldn't call the queen upper class, I'd call her nobility or royality, a different class altogether and not really compatible to the American "class system" (so to speak).

American super rich have their own category too, I should have mentioned. Don't think there's a real concrete word for them but they are called stuff like "trust fund baby"(if they are rich because their parents are and don't have to work), the 1%, millionaires, and the super rich. There is a growing divide between the rich and the super rich in the US in the last several decades, which plays into it.
Does anyone know if there is an SSL specification somewhere? One could then start to write tests at various levels to ensure compliance with the specification. This test suite could then be considered a compatibility test suite as well.
Ask HN: Stimulating websites for kindergarteners?
I help with a hour long 'computer lab' for my child's kindergarten class, and the teacher asked if I had any ideas for the last 3 classes of the year.

A big plus in usability is if the website reads to the student (with a contextual ? sign or something like that). This is critical for most of the kids based on their reading level.

Being a programmer, I would love to let them build (and publish!) a website, but I have not found a website builder that would be simple enough for a child. But that's just one idea.

Educational games are OK too.
A few days is nothing. Fasting for a few days actually feels great. Weeks and months of being constantly hungry, though, probably feels awful.
Insecure Defaults Allow MITM Over TLS
But we are still bound to supply and demand. If everyone was a coder, price would plummet. Programmers are only currently able to do reasonably well because they are relatively limited in numbers compared to the demand for them.

It is very much impossible for most Americans to be coders while maintaining high incomes. The industry isn't anywhere near that big, currently employing less than 1% of the population. Even if it could grow by an order of magnitude, it still wouldn't absorb any meaningful portion of the population.
Short ver: setting 'rejectUnauthorized' to 'null' (which should mean 'not set') becomes false, meaning socketio will accept untrusted certs.

It's probably better long-term to rename the option to avoid ambiguity that comes from double negatives: eg, 'acceptUntrusted'
It's not a bad idea, but there's a few problems:

1. I would 100% forget which symbol goes with which site.

2. The length I choose for my password may be too long/short for a given site.

3. Some sites require special symbols; some sites forbid them. Now I have to pick out my symbol based on the site's requirements, not ease of memorization.
By hosting publishers' content directly, Google plans to eliminate websites
Insurance premiums go up ask risk goes up. This will increase risk. Now the vending business isn't profitable, I lose my means of making a living, and now what? Just join everyone in stealing?

There are many unintended consquences here you're obviously not thinking through. The reality is that this ruling is a game-changer and many will interpret it in different ways. There's no hollywood style theft where you just steal bread cooling itself on the window sill. It will involve breaking and entering, fights with the shop owner, collateral damage (a child trampled during a chase), tempers leading to weapons use, etc.
Hoare quote during Turing award in 1981:

"The first principle was security: The principle that every syntactically incorrect program should be
rejected by the compiler and that every syntactically correct program should give a result or an
error message that was predictable and comprehensible in terms of the source language program
itself. Thus no core dumps should ever be necessary. It was logically impossible for any source
language program to cause the computer to run wild, either at compile time or at run time. A
consequence of this principle is that every occurrence of every subscript of every subscripted
variable was on every occasion checked at run time against both the upper and the lower declared
bounds of the array. Many years later we asked our customers whether they wished us to provide
an option to switch off these checks in the interests of efficiency on production runs.
Unanimously, they urged us not to - they already knew how frequently subscript errors occur on
production runs where failure to detect them could be disastrous. I note with fear and horror that
even in 1980, language designers and users have not learned this lesson. In any respectable branch
of engineering, failure to observe such elementary precautions would have long been against the
law."

-- C.A.R. Hoare, Communications of the ACM, 1981
People are homeless and go hungry in all countries. This isn't something that only happens in Italy. It's a worldwide issue.
> These are all errors that would be impossible in a language with, oh, bounds checking.

How would that prevent the timing leak that caused Lucky 13 or the padding oracle that resulted from not erroring when the message was too short?

The problem with CVE-2016-2107 (and the vulns that precede it) stems from TLS not using Encrypt-Then-MAC (checking the MAC before checking the padding is less error-prone than checking the padding before the MAC). You can design a cryptographically doomed protocol in any language, even memory-safe ones.

Here's one in Haskell: https://github.com/RNCryptor/rncryptor-hs/issues/2#issuecomm...

Further reading on the Cryptographic Doom Principle: https://moxie.org/blog/the-cryptographic-doom-principle/
Pending Home Sales Maintain Momentum in March
I see. So you are excluding the preprocessor, linker, type-checker (for some languages this is a separate program), assembler, etc.?
Stack Overflow: How We Do Deployment
They are, last I checked, members of society. It's also unhelpful to assume they have the time to spend on this - low income already means that basic things like shopping and getting around take a lot longer since they can't pay for convenience, and they could be spending the time they have on education or even hunting for actual jobs rather than going through a meaningless tick-box approach.
PVS-Studio: Static Code Analysis of UE4 (Part 2)
> So your claim isn't that jobs don't exist, but merely that it takes people time to find them.

No, my claim is that it will take more and more time for new jobs to be created, and for laid-off workers to retrain for them. At the beginning of a recession, the jobs don't exist because they have been destroyed, and they are only re-created because the persistence of demand for goods and services--driven primarily by consumer demand--compels it.

I believe that at a certain point, in some future recession, that process will take so long, and will be so expensive, that supporting the levels of consumer demand necessary for economic recovery will be infeasible without government intervention at a scale even larger than what is envisioned with regards to basic income itself. That is, unless basic income is instituted first.
Ig1. Absolutely it is enough to build a sustainable business. Lets look at NY as an example. Over 7.2MM households and at our low end price point and a 0.5% penetration (36K customers) that’s over $1MM annual recurring revenue for electric alone. That's a drop in the bucket when you look at how we scale.
1) 15 deregulated states + DC: well over 50MM households with the ability to switch suppliers
2) commercial - over 3MM businesses
3) natural gas - upsell on gas to a subset of the above market (gas has fewer deregulated states)
4) deeper penetration into our markets through marketing and education.

Traditionally this market is underserved due to the customer acquisition cost (CAC) but our differentiator is to use social media / referral based rewards in addition to more traditional physical marketing and partnerships to drive sales at a low CAC

Finally this will be an incredibly sticky service, we are expecting hyper low attrition once acquired

We believe there is a $100MM opportunity here.
Or find a sport and find exercises to improve it. That's what I did. Soccer is fun, we often lose, but I love my team. We're pretty much considered the best sportsmen in our league (everyone respects us and enjoys playing with us because we treat everyone well, whether we're winning or losing). I took up running so I could play better.

I took up BJJ (individual rather than team sport) as a way to fill my evenings, and to try to get back into martial arts. I've taken up a strength training (bodyweight) as a way to improve myself there.

The exercise isn't always fun, but it has a purpose beyond "run faster" or "lift more" (though those are fine goals as well, just insufficient motivators for me).
Building a newsfeed into your app? There's a W3C spec for that
PVS-Studio: Static Code Analysis of UE4 (Part 1) - http://coconutlizard.co.uk/blog/ue4/pvs-studio-static-code-a...
But we are fake, you just don't know it yet! :-)

Typical morning conversation American to American:

- Hey man how are you?

- good, and you?

- good too! See you later!

Now, that happens so fast that I have tried the following, and the answer was the same!

- hey man how are you?

- oh man my dog just died

- good too! See you later!

Basically, asking how you are is just a courtesy but frankly we don't have time for you.

- hey man how are you?

- well, you know, my wife has told me she wants to divorce me and my kids are not talking to me. It's been kind of rough you know?

- hey man sorry to hear. [starts walking away] I'd love to talk but I got a golf session to go to with my buddies. Keep it up ok? [dissapears]

sigh
Perhaps a mention of Malcolm in the Middle would be part of a more complete history. But the author uses 2007 as the tipping-point between "yesteryear" and the modern sitcom; a show like Malcolm, which ended in 2006, would fall in place quite nicely in the author's argument and not prove an exception to the rule.

I haven't seen The Simpsons in about 15 years, so I won't comment on it—except to note that it debuted only a year after Roseanne, and the two overlapped for about eight years.
And we should all be really pleased that we're working in a sellers market for our skills. Nothing lasts forever.
Oh that's why anglophone media is so thrilled.
I'm apparently in the minority, but, after reading the article, I still maintain that there is never a reason to steal from your fellow man. The potential for abuse due to hunger being subjective notwithstanding, there are social programs in place to accommodate the needy. Do they not have these programs in Italy? I am a very compassionate, empathetic (to a fault) person, but I just don't see the justification for the theft. Ask me for help, and I'm there, but please don't steal from me and think that it's okay. I am, however, open to enlightenment.
Same thing happens at restaurants. If a restaurant gives away excess food to employees at the end of the night, you're guaranteeing that employees will then cook excess food to take home a shitload.

As the saying goes, "This is why we can't have nice things."
"With Tucows’ success in wholesale and retail domain names (OpenSRS and Hover, respectively) and more recently with mobile phone service (Ting) and fiber Internet (Ting Internet), tucows.com/downloads has become less relevant when looking at the balance sheet."

I had no idea that:

- Hover is Tucows

- Ting is Tucows

- Ting sells fiber service

- OpenSRS exists

So, nice work PR team? It's been a long time, but Tucows really did used to be the go-to non-scammy software download site. So, to whatever extent that's still a thing people need to use, this is good news!
There's other things you need to think about to make sense of the relationship between the average wage of a labourer and the price of a house.

First of all, in many places with less expensive land (driven by lower population densities) a 2.5 multiplier between an annual income and a property wouldn't be uncommon even now.

You need to consider the relative social position of a labourer. Today that would be very low, almost all employed people would make more and the role of pure physical labour in our society is marginal. That wasn't the case at the time and a labourer in good health would be higher up on the income scale (of people who were wage paid, which wasn't everyone by a long shot) than they would be today.

The relationship between the cost of capital stocks and income flows depends on the effective perceived discount rate which is driven by people's perception of risk and the structure of the financial system. Remember that at this time, no-one (and certainly not labourers) had bank accounts. It may be easy today for someone living in England to get a mortgage on residential property at 2.5 their income, it would not have been easy at the time. (Mortgaging income producing farmland would have been much easier)

You're also probably implicitly assuming that the cost of housing was the highest cost in most households as it is today. That certainly was not true at the time! Food was a much higher proportion of an average person's income, even for clerics it would be as much as 50% and it wouldn't surprise me if a labourer's household would spend as much as 75% of their income on food.

Other manufactured goods (especially clothes) were also vastly more expensive relative to income. We have records of wills from this period which specifically list individual shirts as well as items of land. No-one in the 21st century simultaneously owns land and thinks of their shirts as valuable long term assets to be willed to their heirs.

After providing for these necessities of life, the amount left to save up to buy property was much less.
My apologies - important revision to the above comment:

This famous M.S. thesis was submitted by Shannon at MIT in August 1937, not at the University of Michigan as per the parent comment. Shannon had completed dual bachelor's degrees the previous year at UMich, before attending MIT. [1][2]

[1] http://dspace.mit.edu/bitstream/handle/1721.1/11173/34541425...

[2] https://en.wikipedia.org/wiki/A_Symbolic_Analysis_of_Relay_a...
Doctors don't have much meaningful impact on health care policy, given their interests are typically competing with both big pharma and insurers.
The discussion of the shutdown announcement is at https://news.ycombinator.com/item?id=4726684

Curious for your opinion regarding why that is articstartup's most popular post.
How to Manage Software Development Risks in an Agile Environment
One of the two issues was interestingly found using Clang fuzzing capabilities. This is in-process fuzzing, that Clang libFuzzer makes quite easy:

http://blog.llvm.org/2015/04/fuzz-all-clangs.html

http://llvm.org/docs/LibFuzzer.html
Overhauled site for muffin CMS
Okay. I'll try to get local help. I already got told that France has a system for that I could use, I'll follow up on that.
Simply not true. It is very easy to work as a Canadian in the US. This is exactly why we have the TN visa.

Because of NAFTA, the US and Canada share a ton of workers.
In terms of (Artificial) Neural Networks it implies their internal representation is functional not merely symbolic.

Soumith has shown this applies to visual modalities and smile vectors or wearing sunglasses vectors are similarly present[1].

This types of vector algebra has some use in translating between languages and modalities.

Karpathy[2] has demonstrated an internal vector of a descriptive sentence can 'plugged into' an image recognising network and used to find vectors representing pictures.

Perhaps a sentence vector could even generate a picture.

What Neural Nets do internally is still mysterious.

(A Highly speculative example) If DeepGo's internal vectors could translate to the modality of plain English we might glimpse its 'mind' at work.

What this means for brains is anyones guess, I find inspiration in Geoff Hinton's guesses[3].

[1] - searching

[2] https://www.youtube.com/watch?v=ZkY7fAoaNcg

[3] http://www.computing.co.uk/ctg/news/2409871/document-search-...
What the what? Your generalizations are way out of line. You can argue about or criticize the ruling but don't use it out of context to push your own agenda.
The market rate is closer to $100, at least in luxury cities like New York.
"Trust us with the backdoors and all the data we're collecting on you. They'll be safe," they said.