skysight-inc/HackerNews huggingface dataset:
Apparently a "tootsie pop" is an American sweet (candy) which has a hard centre and a soft middle. The allegory is that having a hard fixed API with a dangerous/unsafe centre is the way to wrap unsafe code. Though why the article wasn't just titled "how to wrap unsafe code in Rust" is unclear to me.
Yes (the same as the _verb_ deserts is pronounced)
This is ill-informed and dogmatic bravado. It has no content. Please don't make comments like this in the future, they are an invariably negative contribution to the conversation. You do not understand the post you are commenting on, which assumed a level of understanding of Rust that made it a poor fit for this venue.
Show HN: Facebook as a playlist
A strip mall (or "power center") is still a mall.
Thanks!

Arcan is definitely written to be used without the Lua parts as well, and on the project timeline the final pieces of the puzzle is libifying the engine. The reason why it is not like that right now is just that the internal engine interfaces are not in a stage where I would 'commit' (and document and test) an interface that others might end up relying on.

I also much prefer statically typed languages, I consider Lua somewhat "the best among the worst". One nice thing with its VM integration API is that it lends itself to be swapped for another VM without too much work rediscovering a type model. If I would have the luxury of more time, binding the engine to Haskell would be high on the list.
Oh, don't get me started on this stuff: https://youtu.be/xIoRWIgzvbM or this: https://youtu.be/aoNSBPhaDjM . I guess it's something about the combination of engineering marvels and how deadly everything is.
The title sounds very interesting but the article is paywalled.

Oh, and when I lived in Zambia -- almost 20 years ago -- we also had non-electric fridges, instead they ran on paraffin.
I'm not even that surprised. The genius web annotator is really half-assed, functionality-wise as well.
Not really...there's a reason while psychology is not considered science by non-psychology scientists: it's not because the researches couldn't be done in a scientifically useful way, but because even the teachers don't care about math. I think Facebook and Google and other ad agencies have a better model about human behavior than psychologists (although they only have data on a specific part of human behavior)
"Amy is keen to tell you that her ability to schedule your meetings is “like magic,” rather than, say, the end result of using venture capitalists’ money to pay highly trained machine-learning software engineers."

Bots and AI seem to have a conflict or trade off, which seems similar to all computing technologies, namely user experience. We should want to design interfaces which appear like magic, that have less friction to the user. Should bot / AI interfaces seem as easy to use as web pages? Do we really deceive for this class of technology? If we do, then I would suggest that virtual reality would have more ethical consideration. When we live in VR, our immersion levels skyrocket, we behave more closely to our true selves. Combining the two - AI/Bots in Virtual Reality could provide an even greater challenge.
We've got some pretty hairy legacy C++ and all versions of VS prior to 2015 fell over it. 2015 handles it just fine, it's worth trying again.

Regardless, clang just uses the headers - at least that's the story with clang-autocomplete. It seems to parse them much faster than VS does, so reusing the VS cache me might cause perf impediments.
> Though they can directly address this by taking photos out of the mix.

You could, with mixed results, I'm sure. There are many other factors to base a prejudice on; for example "does their name /sound/ black?"

Airbnb could also establish an anti-discrimination policy, which if you are caught in these types of incidents, you and your properties will be banned for some amount of time.

I've never used the service, so I can't say for sure, but I can think of at least a few good ways to accomplish this along with a team responsible for checking into flagged events and user reports.
Data Access Objects really have gone too far when you think about it.
As someone who works at Facebook on a team dedicated to improving developer efficiency (React), I assure you that FB sees value in long-term maintenance and tooling improvements. All the teams building features do too.
This post is not about 'wrapping unsafe code' - in fact, its not even about writing Rust at all. Its about trying to delimit the scopes in which the compiler will perform optimizations based on invariants that are guaranteed in safe Rust but can be violated in unsafe Rust. This is a post about the design of the language, not of code in the language.

The name was chosen because it was the metaphor the author thought of; as a bonus, you've learned something about another culture. Tootsie pops (the most common lollipop in the United States) have a privileged place in American pop culture because of this commercial: https://www.youtube.com/watch?v=O6rHeD5x2tI
Pretty sure you meant tens of billions.
New iPhone style ‘leaked’
Bluespec is used for the FPGA implementation of the CHERI capability-secure processor architecture.

http://www.cl.cam.ac.uk/research/security/ctsrd/beri/
Exactly same experience, I also became a crybaby about children related incidents after becoming a parent.
Reminds me of fresh pottery buried for a while to later sell to tourists as antiques.
Ask HN: Why exactly do you dislike Oculus?
I have read alot of articles that are making me lose interest in purchasing one.

I want to know what I am buying by knowing exactly why people are complaining about them.

1. Hackers, what were your expectations for Oculus? What alternatives to Oculus satisfied these exoectations?

2. What else (anything) makes you dislike Oculus?
Terrafugia is building flying cars
I just want to say "Privacy matters, thanks you" (even more when FB decided to leverage their like/share button for a global ad netwotk) :-) non tech saavy guys may love a simple .sh / .bat to automatically add those entries to the /etc/hosts on windows & unix
I'm very happy having a open and very loving relationship where such happenings can be talked about in the open without fear or problems. If most humans would be monogamous in heart, which some really are, it would not be so common.
Could Computing Dissertation, Cloud Based Manufacturing, IT Dissertation
I haven't cried for years, and I don't wear that as a badge of honour either, it's just never been a thing for me.

I've had the 'lump in the throat' moments, sure, but not breached the wall to have the dam burst in quite some time. In fact I think the last time I properly cried was when my dog was euthanised and that was 12 or so years ago. That was the first time I'd seen my Dad completely broken too.
Oh wow, I didn't know it were that many, I had like 20 in my hosts file. Thanks!
Euclid, the game
I am not privy to what goes on inside secret meetings of the C suite, but as a tech employee who also owns a side business (non tech) with a couple of partners who've run other businesses, protecting yourself from lawsuits is always a concern. My guess is, if you ever find yourself in a casual conversation with someone in HR you will get an affirmative answer as to whether candidates' diversity in their non-necessary attributes (e.g. sex, ethnicity, country of origin, religion) are considered assets to the company beyond their relevance to qualifications to do the job for the sake of EEOC. No, I won't narrow the statement any further, but I will disclose that I work in a major and "politically liberal" metropolitan area in the USA. Granted, it may be less so in areas with a more homogeneous population, but I'd wager there's still even a concern even with regards to ageism.
>On Windows 7, the default AV security scan will try to remove the
# facebook.com entry

Wat?
It is faintly terrifying just how long the list is.
While a loooot of libraries are Python 3 compatible now, There are holdouts among python libraries with heavy C FFI elements. So if you have just one of those in your stack, it becomes really hard to use Python 3.

Though honestly, I feel like Facebook could, you know, pay people to port the needed projects to Python 3.
Any idea of an easy/quick way to toggle these edits on/off on Ubuntu?
I'm guessing some sort of crude malware tried to MitM Facebook logins so they started cleaning host files?
Hmm, the filter bubble will damn us all.

the answer is: "The Man From Earth", a movie. A very good movie.
Not sure if this list is included here, but here's something a friend has used:

https://github.com/StevenBlack/hosts
To fix Android updates, hit OEMs where it hurts
Would wildcard support in hosts files be too heavy for the performance needed? Most of these are subdomains that *.facebook.com would have blocked.
Do hackers seek to make a living off bounties? It seems as if they just want a good, rewarding, motivating experience. To be treated with respect and to get the recognition they want. $50 for a vulnerability appears very low for this. Looking in the hackerone site, some companies publish how much they give to the hackers and most have a much more generous minimum reward.
Just FYI, here's an algorithm [https://github.com/animetosho/ParPar/blob/master/xor_depends...] which explicitly relies on JIT being a fast operation.

It's different from your typical language interpreter type JIT in that it's used as an optimisation for generating an optimal processing kernel. Once generated, it's only used once before it's thrown away, as a different input requires a different processing kernel.

Have actually tested using syscalls (not for W^X but rather as a potential workaround for newer Intel CPUs exhibiting weird SMC detection) and have found the overhead to be way too much, even for just one syscall (whilst switching between W/X would require two).
Isn't Ghostery a better solution for something like this? If we are talking about browsers that is.
This uses less system resources.
That makes sense for insurance where the "upside" (for lack of a better word) is very high - say, millions. Very few people could save millions in liquid assets, and for most of those who could, a million dollar event is still catastrophic enough that it makes sense to insure against.

But, as in this case, when the upside is capped at a fairly low number, which is entirely achievable in savings for most people who could afford the premium in the first place, savings are by a wide margin preferable.
Interesting thought. I wonder if it does that to email domains as well.
curl https://raw.githubusercontent.com/jmdugan/blocklists/master/corporations/facebook/all | sudo tee -a /etc/hosts
No. The DAO that can be explained like you're five is not the true DAO.
Thanks for your comment but why would you "hate" to see another design?

We're not creating a whole new system, just an alternative. And as a start we will be Mamfrotto compatible only, since that's what we use. I could be wrong but Kirk doesn't do Manfrotto at all.
https://news.ycombinator.com/item?id=11777162
Peter Thiel's dangerous blueprint for perverting philanthropy
My first impression when I saw it was something along the lines of "this would be so much cleaner if one were writing this as a dnsmasq config"
A lot of the stuff you use every day is made with what is practically slave labor, often child labor too. Not that it makes it any better, but there is no reason to single out rugs.
Not the way I'd do it, since you can easily miss on some new domain that belongs to facebook (or perhaps some server that does not look like it belongs to facebook in the first place, but it is sitting in their assigned subnets).

If you really want to block all traffic from/to facebook, lookup the IP prefixes associated with their AS number(AS32934), and setup your firewall to block those. If you are using PF, tables are your friend. With netfilter, consider using ipset.
Considering the infrastructure Facebook is running, it's really not IMHO.
I can confirm that clang just uses headers, no linking involved. No project either. Only the headers you include in your file. So it should not compile a lot unless you have a file that includes the whole project, which is probably not the case.
Nothing tells me U.S. official policy towards Iran is changing more than subtly favorable articles like this appearing in the New York Times.
It surely does. Also, their learning materials are great too. I found to be able to get a basic pipeline in a matter of a couple of hours.

If you don't have a docker heavy type of dev workflow, I think it is a great alternative. Totally worth checking it out.
A referendum in The Netherlands is not legally binding for the government.

The same thing happened just a few months ago when the Dutch people voted against the EU association treaty with Ukraine [0].

The government will still push through with the treaty. The EU project is holy and must go on. Jean-Claude Juncker, president of the European Commission said the following on the Lisbon treaty:

"If it's a Yes, we will say 'on we go', and
if it's a No we will say 'we continue'."

He also stated:

"There can be no democratic choice against
the European treaties."

[0]: http://www.theguardian.com/world/2016/apr/06/dutch-voters-re...
I'm not doubting you, but wouldn't the tire/brake residue, oil drips, etc. render something less "old" but more "roadside trash?"
Thanks for reminding me I'm on the internet.
> I am seeing number in range of 500 for population of 10M.

Over what time period?
Show HN: License check for vendored packages in golang
A web page, where all the useful information is in sound files, that I have to download and listen up to? That is indeed brutal. I can read 10x time faster than listen. Please put the wording to text. Save my time. Besides text files are much more compact than audio files.
It is technically impossible for millions of Americans to get insurance. I mean unless you can print your own money.

26 states refused to expand coverage so there is a huge hole and they went to the supreme court who said it was perfectly okay for them to do that. Google it.

Hillary will be unlikely able to fix this and Trump definitely won't fix this, so if I get cancer in the next eight years (plausible, both parents died from it) I am screwed, though technically I could undo my entire life, move to another state and wait a year to apply and hope I don't die in the meanwhile. Yay America.
I don't know much JS, let alone React, but after reading the OP link, "Basic Theoretical Concepts" made sense to me. The bit of Haskell experience I have probably helped.
Show HN: Sharing to multiple social accounts made easy
In many (most?) jurisdictions you can post a bond for liability insurance. This is typically used by fleet managers etc, but is also available to HNW individuals.

Essentially you prove to an insurer (by posting a bond) that you can and will pay for any third party damage you cause, and in return they give you a practically free (or cheap, super-high-deductible) policy.
I was considering buying one until I realized that it requires a powerful, external Windows computer to run. I had kind of assumed it was a standalone device. They're also getting bad press about DRM / incompatability with other VR hardware. Personally I'll probably wait and see if the technology improves and gets cheaper.
Friend FUN
26 states refused to expand medicaid which was a critical part of Obamacare's plan to get everyone insurance.

So it is very possible to make too little to get insurance outright and too much to get medicaid. In fact there are many millions of people in that boat in 2016. Apparently we are illegal human beings, walking around without insurance.
If you're blocking Instagram, shouldn't you be blocking the Oculus Rift site (and any subdomains) too?
But does it perpetuate it, or help them escape it faster? My grandmothers both worked as children in Europe. Nowadays I'm a software developer who sits on his ass and complains if I'm working for than 8h/day. The same pattern seems to have been the norm in most (all?) developed countries.
There's also SublimeClang for SublimeText2. The most active fork as of late is https://github.com/ensisoft/SublimeClang
The Bandwagon – Claude Shannon
I recently had a nagware popup telling me that my phone has already downloaded the 1.1 GB update, with only one option when clicked: "Restart and install"; once a day after midnight, it seems, the notification goes from a background notification to a foreground notification, and it's not until I enter this "restart and install" screen and hit the back button that the notification gets a "Later / Install" option to turn it back into a background notification.

I don't know why LG is pulling this Microsoft Windows 10 nonsense on me, but I certainly wouldn't want to do anything to increase their incentive to do so, so I'd be pretty disappointed with any incentives for OEMs based on "actual adoption" rather than "availability of update".
I'm wondering ... what's the best approach to automatically collect all domains of a company?
This does just the same:
.facebook.com
.facebook.com
.fbcdn.com
.fbcdn.net
.facebook.com.edgekey.net
.facebook.com.edgesuite.net
.instagram.com
.instagramstatic-a.akamaihd.net
.instagramstatic-a.akamaihd.net.edgesuite.net
.cdninstagram.com
.tfbnw.net
.whatsapp.com
.fbsbx.com
facebook-web-clients.appspot.com
.fb.me
fbcdn-profile-a.akamaihd.net
h-ct-m-fbx.fbsbx.com.online-metrix.net
ac-h-ct-m-fbx.fbsbx.com.online-metrix.net
Autodesk Vehicle Tracking 2017 Crack and Keygen Download
I don't think companies should be able to operate subsidiary's because it's not a separate entity. This would prevent a lot of bad behavior and I am unsure of any net gains for society.
I can understand the multiplication of sub domains, to be able to use multiple connections. But what's the rationale for the multiplication of domain names? Ad blocker avoidance?
https://grepular.com/blog/ - Tech stuff.

I used to write quite a lot, but it tailed off. I'm actually in the middle of rewriting the engine behind the website so that might prompt me to start writing again when it eventually goes live.
Ah, I was thinking of pixel size, because actually displaying it requires that it be decompressed. If your machine is memory-constrained just having an image that size (decompressed) can be crippling. I remember it bringing a machine I had several years ago to a crawl for that very reason. Maybe I'm just showing my age here :).
Leading a project inside a company != creating the thing.
There's a very fine line to be drawn.

I think it boils down to a conflict of interest and hence Thiel shouldn't have been involved in the legal process at all. That's the unethical element about it (to me).

I think it's also about transparency.

Thiel should have been front and centre during the legal process and open about his involvement instead of manipulating from the background.

Now, Thiel has not only undermined his own reputation (would you want to deal with a man who, if you got on the wrong side of him, might use considerable economic might to bring you down?) and the reputation of the legal system (now perceived to be a football game for billionaires).

You can argue day and night whether or not this is ethical or unethical, or how important the original legal cases were. However, Thiels' approach failed the smell test (to me) and has done more overall harm than good in the cold light of day ... just so one man could have a "fuck you" moment in the sunshine.

Disclaimer: if half of the things written about Gawker are true, I'm obviously not in their camp. It's possible to criticize both for different reasons.
A slave in Scotland
I use my Pebble Time smart watch. I press one button on my watch and it instantly displays a list of 2FA codes for a bunch of sites.
http://www.peace.cm/

It's just about life and my exploration of tech.
Or look at phones vs. other appliances that are made for smaller markets. Garmin is the dominant incumbent in portable GPS devices and even their handsets feel like garage-made prototypes compared to even the worst phone, despite being exactly the same technology except for the backlight diffuser film.
There are patents for perpetual motion machines. Building something is hard, describing a vague idea is easy.
It's not viewed as waste, though. It's viewed as investment. The infrastructure being built employs a lot of people in the lead-up, the public transport of the host city gets upgraded, it's an opportunity for the host city to become more well-known internationally and boost tourism for years afterward. Local businesses ought to do quite well out of it.

I'm not particularly a fan of the Olympics, but I can see why cities bid against each other to host it.
We're running both GitlabCI and Jenkins (different teams) inhouse. Gitlab really upped their Game with the integrated Docker repo (we've adopted Docker heavily) but it is lacking the plugin ecosystem of Jenkins.

Jenkins on the other hand just feels dated. The new ui is very welcome.

Looks like we're going to keep the dual approach for a while until things crystallize further.
When did you stop beating your wife?
The "depending on your goals in life" part is important I'd say! I, personally, find "the rock" types pretty creepy, because life is about emotional connection to me, and that's the one think I'll never get from them. :(

If, by "social results", you mean "well-connected" or "successful", then I agree.
I generally see two reactions to the "one codebase to rule them all" approach (used by Facebook, Google, et. al):

1. Holy god why would you let your code grow to such a massive, interdependent scale? Just release everything separately and versioned so that breaking changes don't affect everyone all at once. The idea of git being a bottleneck is absurd and you are using it wrong.

2. This is a very reasonable, practical approach to sharing code across a company. It reduces siloing and ensures that major refactors can happen in one pass without a ton of coordination. Better to fix the version control system than waste endless resources refactoring millions of lines of code.

Both reaction is valid. Having worked in both styles of codebase, I recognize that there are trade-offs in either case. The optimal solution depends on the project and the team.

Sometimes the path of least resistance--that is to say, the path to getting things shipped and, in turn, making money--is to let the codebase grow organically and worry about cleaning up any messy interdependencies later, once you have a better idea of what code you even need to keep around. In this scenario, it's important to recognize that developer efficiency is going to be an uphill battle in the long run, but if you are proactive about maintenance and tooling improvements then this approach can still be relatively painless.

Other times, especially when you're working on a tried-and-tested product with a clear API and a dedicated team, it can be productive to split it out and let the team manage their own versioning and releases. This becomes especially useful if the product is open source. (For instance, I wonder how Facebook manages its open source releases relative to its shared Mercurial codebase.) In this scenario, developer efficiency is usually less of a problem, as proper use of versioning can ensure faster, more agile updates to each product. But the downside is that your company as a whole can end up in a kind of versioning hell, where every project depends on a different version of every other project, and keeping everything up to date can require a huge amount of coordination.

So, in the end, pick your poison. My reaction, years ago, was more along the lines of #1, but I used to be much more of an idealist earlier in my career.
Why did Uber need billions in investment when software like that only costs $2.5k to implement ;)
Alternatively you can use Adblock to block it.

https://secure.fanboy.co.nz/fanboy-antifacebook.txt

Disclaimer, list Author.
If your an American in the UK Banks wont touch you with a barge pole and you are effectively excluded from things like ISA's
rarely do i laugh out loud reading the web, but you got me ;-) very very true!