skysight-inc/HackerNews huggingface dataset:
Very nice. Services like this can help keep the costs and maintenance of smaller projects to a minimum. I myself created a proof-of-concept online programming judge without any server (see http://www.pesfandiar.com/blog/2016/05/12/javascript-online-...). I only used Google Cloud Platform and Cloudflare at virtually no cost.

I wish they had some minimal features that you'd need a server for. I'd pay $5-10/mo to get some basic authentication, custom headers, and maybe even some sort of user-specific key-value store.
> Technically, if security is your focus, then shouldn't one of your first actions after setting up a new machine be to set iptables default action to drop all incoming new,invalid packets anyway?

But why expect the user to do that themselves? Shouldn't security be the default, with a secure configuration provided out of the box?

Giving the user a secure configuration which they can then opt out of if they wish does better by the user than giving them an insecure configuration and then asking them to opt in to security does.
Still wouldn't work. The loser wouldn't pay until the case is closed, and the company could go bankrupt in the meantime. Case in point, Gawker is widely expected to have their damages reduced on appeal, but it's already too late.
You'll get no argument from me. That RAII exists at all is the best evidence ever ( even though I've used a variation on RAII in assembly in the past ).

The interesting question is - are there actually fewer defects, objectively, or are they simply rendered .. something like latent?

One I fixed in... April - if the file system on an SD card was scrogged, writing to the file system crashes the box. So I moved the write of a configuration file from the event of a switch change ( because if the switch was never put in that position, then there was no reason to ever do that ) to the top of the program so it'd crash when you powered up.

It helps me personally to think that defects are just something I've chosen to do despite my best effort. Keeps me on my toes. I certainly understand people being fatigued by that.
If somebody uses a piece of software or language that is pre-1.0 with "Beta" and "unstable" written all over it and then they get mad when it changes, that is purely their fault.

The programming community of people who actually write real things and create production software, I highly doubt any of those people are the people you are referring to and thus Rust should be doing nothing to restore its reputation with those people, as they are ignorant and/or highly incompetent, and I hope they never write a piece of code that makes it into production.
The last time I checked, the "average user" can't even use the web without getting their computer infected with malware served by ad networks. They may want functionality, but as far as I'm concerned they aren't aware of the price they are paying for it.
I agree. It may be a necessary evil to counter the effect of money on litigation. As a result it should require transparency about who is funding the 'maintenance' in order to clarify any conflicts of interest.
That would be more worrisome given that Whatsapp is supposed to be encrypted end-to-end.
The whole gawker media "empire" was despicable. This is reflected by the fact that so many were ambivalent or supportive of the lawsuit against gawker. Glad to have them gone.
Just out of curiosity, did you phrase the question "expose a class's instance variables for read access," or "write a getter?" I see it as the difference between academic phrasing and colloquial.
It depends a lot on the terminal. I've been using a chip card for over 6 years now, and here in New Zealand we use cards for almost every payment.

The first generation of chip terminals were horribly slow, they took far longer than a swipe. They also wore out really fast - the spring contacts would stop making proper contact with the card leading to failed transactions.

The current generation (fourth I think) is much faster and more reliable. They can read the chip faster than contactless, there's still the PIN entry though.

I'm not sure how it is in the US but here most retailers rent their terminals so get reasonably regular upgrades.
Wow, wish I had a product like this as a grad student.
Exactly -- the problem is that our civil litigation's "truth-finding procedure" is so vulnerable to financial influence. Asking how to "keep people from spending money on lawyers" is the wrong approach; the system's process needs to be robust against such asymmetric investment. [1]

People forget that proper civil litigation is a public good (in the economic sense). Ensuring that (civil) wrongdoers pay for their actions benefits everyone by making it less likely they will be a victim of such acts, and more likely that transgressors will offer a quick settlement rather than using the courts in the first place.

[1] While it's impossible to truly shield off such influence, we can at least go for some standard like, "it should take an exponential investment to produce a linear impact on the award".
> This difference on this test is caused by Rust not having stabilized SIMD support. Also Rust support hand rolled assembly (on nightly) that C has.

Cool. Let's call that language with SIMD and inline assembly support FutureRust(tm) to differentiate it from the currently released and available Rust. We can have a discussion about how fast FutureRust will be vs C, but this discussion is about Rust vs C. Or rather clang 3.6.2/gcc 5.2.1 vs Rust 1.9.0 since language performance is very implementation dependent.

> On non-SIMD tasks Rust/C are neck and neck https://benchmarksgame.alioth.debian.org/u64q/rust.html

In 5 of 10 benchmarks, C is twice as fast as Rust. In one of the benchmarks where it is neck and neck, like pidigits (https://benchmarksgame.alioth.debian.org/u64q/performance.ph...) it appears to be so because both the C and the Rust variant are wrapping libgmp. GMP is written in C.
Like many things in politics and law, forming one's opinion must include considering a reverse situation - what if a wealthy individual funded the successful litigation of a "positive" entity? e.g. Bill Gates funding the destruction of the EFF (assuming someone had a case).

I was taught to do this in political classes (based on James Madison's discussion of factions), and it can have such a huge impact on motives and attitudes. For example, should government track all Muslims? What if in 10 years the government started tracking all Christians? Still think that tracking policy is a good idea??
That's because the The New Yorker is rather dull. Anything interesting stands out -- assuming your eyes haven't already glazed over from wading through descriptions of people's clothes and suntans.
Because most of the ACLU's activities do not fall under this discussion.
MISRA is okay. It's not a panacea.
Sad bot truth about the 400K retweets of “Delete your account”
I agree. As soon as I read the first comment about weeding being unnecessary, I realized that person wasn't dealing with thistles. I am in an ongoing war with those things. Even after covering up a section of garden for two years with opaque plastic sheet and heavy junk, a week after removing it, up they come.

My soil is very good quality, having been improved with chicken & horse manure and composted chicken litter. The problem is I live on a windy hilltop and seeds from all over land where I'm planting. I've even had a wheat stalk show up.
Why America’s gas stations are running out of time
I actually think that's a better way to do it than what we usually have to go through.

I believe the Israel uses this technique as well.
"a journey into sales [products]"

At the end, John says he's "100 times better" at sales now than when he started. I didn't read much about things he did to improve his personal selling skills, just how certain products have grown sales at Monitorbook. I don't doubt that he's improved, just would've liked to read more about his sales skill improvement than the products he discovered.
Or maybe his point is anyone can be a good salesman because these tools are out there for anyone to use?
It's a good idea, but not entirely correct. Looks like the founder of Amplemarket is a different John, but probably a friend or something.

source: https://www.producthunt.com/tech/fetch-6
That's more about encouraging crate developers to make their package work on stable. There are crates that are made to take advantage of nightly features, but I believe many of those label them as "beta", "unstable", "only works in nightly".
Ah! That's really cool then! I thought it was just the command line tool.
Can Monsanto save the planet?
How will bots make money? Here are 7 business models
Why we made a computer game about the federal budget
I wish I could get a fixed cellular install with 30GB. I pay $60 for 10GB cellular, and I only survive by watching like 5 videos a month, using my church's wifi and putting anything that doesn't require low latency on my dad's 10GB per month satellite, which with 5 people in the house the high speed data is gone in a week.
Elixir's (Almost) Insane Flexibility: “Mutable” Iteration via Macros
I developed on Filemaker for awhile, being an Apple product I found it much more user friendly than Access. I still get the periodic promo email from FM and they have pushed the web/mobile/app side quite a bit lately.
I agree with you. It's just too expensive for me, maybe not for others.

In the end they are just tools, and you should use whatever fits you better.
As someone who has done research in the area, I'd argue that a lot of work on temporal logics is at about the same level of difficulty as a better-than-average undergraduate linear algebra course. Certainly none of the standard results about various temporal logics even come close to approaching the difficulty of a first or second year graduate mathematics course.
I think "loser pays" is a pretty good equalizer. It actually would protect companies like Gawker from frivolous lawsuits, or merely just the threat of those lawsuits. The savings could be used for legit cases such as this, without having a settlement bankrupt the company. And attorney fees are high in the first place because of the the demand frivolous lawsuits put on the system, so there's an additional source of savings from Loser Pays.
As sad as it is unsurprising.

But this will continue until the justice system stops assuming cops are always right and everyone else is always guilty.
Were they using 256-bit random identifiers then this wouldn't be a problem. In that case, the IDs would serve as capabilities to the resources.
Tenant Assured, easy way for landlords to sift through tenants' online profiles
I think this is it. To be good at mathematics you need a considerable amount of time to sit and do mathematics. The only way someone is going to fund this as part of a job is if you're already a mathematician.
League of Legends admits to using chat-log analysis in employee reviews
Is there a difference between what Surge offers versus ngrok?

(Genuinely curious, not trying to imply that "this has been done before" or shouldn't exist!)
Or if he doesn't do it personally, he can certainly create the Privacy Protection League in order to fight for privacy rights. And guess what the first case the new PPL might take on. I'm not sure how you distinguish that from a legitimate organization like the EFF or ACLU.
here you go: https://github.com/TidalLabs/Slacker
Also remember that's 13 bucks to get custom SSL, redirects, etc. If you have simple pages w/o the need of https, it costs nothing.
I don't even remember how sophisticated the querying had to be - I think it was something like:

- find and display all movies by the specified year

- substring text searches in the title

Maybe one other. But it wasn't even approaching anything really sophisticated. We just wanted to see that people could write a basic logic flow, read-and-write data application.

Then for the people who did finish it, we looked at the code. Was it well commented, well thought out, did it have error handling (what if the input file doesn't exist? What if something eats your data file while it's running?), what assumptions did they make.

So the base test was basically a sniff test - if you can't do this, you're not a good enough developer to work here. If you can do it, we'll look at the quality of the result to assess how senior you are.
Roughly $30m in 2016 dollars, still not a lot, but this was back in 1987, which was still before computers were as ubiquitous as they are now.
From a comment in the blog:

You can decide if a daemon should start on install by adding /usr/sbin/policy-rc.d file. It is described in /usr/share/doc/sysv-rc/README.policy-rc.d. Notably, just putting "exit 104" should give you something similar to what you expect on Redhat.

You can get the original MD5 sums of the configuration files with dpkg --status. You could also just install tripwire that would cover all files.
Yeah, or you could use the opportunity to demonstrate that you know how to roll your own data structures, provided you've clarified that the dataset isn't likely to grow. Instead of showing them you know how to install a database.
I'm a co-founder of netlify and happy to chime in.

Surge is a simple tool with a really awesome CLI for deploying static sites quickly.

At netlify we're building a larger platform for working with a modern static approach.

We have an integrated continuous deployment platform. That way you just link a git repository to netlify, and we'll do the build whenever you push to git and even give you preview deploys of pull requests.

We run our own content delivery network, which means a lot for performance, and can post-process assets to automatically serve them out of a larger asset CDN with far future expires headers.

Netlify has built in Let's Encrypt support with a 1 click setup. We'll do automatic certificate rotation and enable HTTP2 when HTTPS is turned on.

Our CDN can handle complex proxying and redirect rules. If part of your site need to go to a dynamic backend or if you need API proxying, a one-line rule can set this up. We can even handle gradual migrations from a dynamic to a static approach by proxying all non-static requests straight from the CDN to a dynamic origin.

Apart from that we have lots of extra features like built-in pre-rendering for single page apps, Geo IP based redirect and rewrite rules, JavaScript snippet injection for easy analytics setup, form processing, etc, etc...
Agreed. I have no adblocker on mobile chrome but DNT on and get the same warning.
If they're not in jail, they're not being punished. This is a staggering amount of willful, intentional corruption. The criminal conspiracy and "illegal fun" rises all of the way to Secret Service Assistant Director Ed Lowery. The only acceptable answer to this is to flush the toilet and rebuild the agency from the ground up.
Any lawyer here care ti tell why the following would not work?

1. Start new corporation
2. Buy new set of domain name with said corporation
3. Redirect Gawker (and other gawker sites) to new domains until they sell the carcass of the now-defunct Gawker.
What other kind of favor you can expect from a monopolist? You're not going to have your car repaired anywhere else and they know it
So you're getting a 'favor' only because you're doing even a greater favor to them
It's harder than it looks. If you improve things willy-nilly, then you split the language - some will use the more modern version, some will stay behind.

IMO, a better evolution is to do what the Rust folks have done - define a new language. This way it has a new name and you don't have to qualify which version of 'C' you mean.
I wonder if you could sue some of the creators of political ads. I would love to see them bankrupt.
Yes. And my so-called "broadband" ISP is BSNL to be exact. But since their "full-speed" (~200 kbps) connection lasts only a few days each billing cycle before their fair-use policy kicks in, throttling me to ~60 kbps, you can hardly call it 'broadband' in any sense of the term. Nevertheless I stick with it since its sufficient for my needs (albeit you need to cultivate patience) and cheap enough. But their recent increasingly aggressive attempts to redirect my connections to their nag-pages asking me to "top-up" or register for their email are testing my forbearance.
> This is only a lapse in security if you're relying upon URL obfuscation for security to begin with.

Which is perfectly reasonable to do: a URL containing a cryptographically-secure identifier is itself a cryptographically-secure identifier. An example would be http://foo.invalid/ed2e898ff0b132202cb0bd0dea0d389a7b6439160....

Another example would be OAuth2 bearer tokens, which may be encoded in the URL as a parameter.

> It is only actionable if you can MITM or otherwise easedrop and find the graph ID.

It looks like the graph IDs are enumerable, rather than being high-entropy, so it looks like you can trawl through the graph looking for interesting objects.
As I think I said elsewhere, we allowed people to use a database if they wanted to (and could install it themselves on the dev VM we gave them), but then we would include looking at how they designed the schema, how much thought did they put into connection handling, etc.

But most of the people who successfully passed this didn't use a database, it just wasn't enough data to be meaningful - thousands of rows at most.
This is a weird thing about LSTM generated sequences. Any random 5 seconds of this sounds reasonable. Like it could come from an actual movie. But there is no coherency between these sections. It flows and ebbs randomly around the state space like a markov chain, with no direction.

I think this is because LSTMs have very little "memory". They have a learned procedural memory, but no episodic memory. So they have a very difficult time keeping track of information. E.g. if I say "the cat was in the box", a few sentences later I might say "the cat is in the __" and the LSTM has a hard time guessing "box".

Second, it works by predicting the next character in a sequence. This is not how humans write, at all. If you ask a human to predict the next word in a sequence, and then the word after that, and then the word after that, etc, you would also get something like this.
Does this mean CVS will re-enable Apple Pay on their CC readers?
"bullet time" style where the drop starts (and you can see an out of focus Holmes in the background turning to look over her shoulder as an FDA inspector arrives with a bunch of FBI agents and a search warrant, then the blood drop freezes mid drop, the entire scene rotates around and now you can see the face of a young Holmes in a Stanford laboratory class watching the drop hit the "glass collector thingie". Pull back to a wide shot and start from the beginning of her journey.
See also, How we picked the debt goal for The Fiscal Ship

http://www.brookings.edu/blogs/up-front/posts/2016/04/27-how...
If they do no harm, why do you want to spend time removing them?

I agree wholeheartedly. If. Unfortunately, if I ignore the thistles and many of the other unwanted plants, they will outcompete the plants I do want and completely overwhelm them. I'm not a big fan of doing unnecessary work. I know from experience that if I don't weed, I get almost zero yield. Squashes and potatoes are the only plants I have that survived.

OTOH, a few minutes here and there spent weeding (get them while they're small) and I get more veggies than I can eat.

This year I'm experimenting with using discarded heavy plastic bags as mulch to suppress the weeds. I'll see how that goes.
Even the name tells you that C++ was originally designed to be C with extra features. It can still be used that way and frequently is. These days, there are contexts in which the differences are very significant, and there are many others where any statement about either applies to both, and in those latter contexts "C/C++" is completely valid.
Fresh Work: 80%/15%/5% rule
Yes, but with PPT, Excel, Word you bought it once and then no longer paid MS any more (until a new version of Office came out). With Snapchat/IG you advertise to your user forever.
You might not succeed at 100%, but you can remove "classes of error" by adopting particular styles or techniques backed by formal analysis. That's one of the biggest appeals of compiler technology - it can encode an understanding of patterns proven to detect failure, and in so doing lower your resulting bug count.
For someone presumably involved here, you seem pretty misinformed...

>> Walmart, Target, BestBuy, CVS and all these other stingy retailers

^^ These retailers ARE who came up with the idea. They are the ones who evaluated how much and for how long it would be worth it to invest in MCX, and they are all part owners of MCX, so are well aware of any decisions being made. Until MCX files for bankruptcy, it is safe to say that they still believe the cost is worth the potential payout.
Despite having owned an Amiga, I didn't know about the XOR patent. Here's a brief summary I found:

https://plus.google.com/+RayCromwell/posts/dbipY1GJoGv
They've also been appearing a lot recently. Consistently 3-4 of the top 20 links.
It looks like the same strategy as used when rigging elections in South America: https://news.ycombinator.com/item?id=11397113
Whether this is ordered by the candidate's staff or not, there will be no way to trace the origins of the bot purchase.
Agree, Middleman + Middleman s3_sync is such an easy set up and deploy... Middleman project doesn't get enough love I think...
I think the main point was that Microsoft felt they needed to simply buy a product rather than develop their own. They may have arrived at the same terms without Apple et al knocking at the door.
Airbnb City Hosts
Yup - our really good developers would do this end to end in < 40 minutes and without needing anything.

But the range of times was stunning. There was a lot of people that managed to pass, but it was a three or four hour exercise (I'm willing to chalk some of that up to nerves or overthinking the problem).
Could also lead to power savings as well having the model on a SOC with the next Apple CPU.
The only thing secret about their service is how stupid these people really are. It's unfortunate that instead of taking healthy criticism from another US citizen, they instead chose to be vindictively juvenile. Real men don't hide from the truth. Not surprised, unfortunately.
If you're going to accuse us of doing something bad, please state clearly what "it" is and give specific links so we can look into what happened.
Good, so they invented Keynote that is a ton better. I use it even for things that I should be using Photoshop/GIMP.
Who gets to determine if you're a public figure? Nick Denton? You might not approve of his standards or discretion. I hope you haven't posted any 'racy' pictures, or that you don't become dangerously successful.

I am all for free speech, but if we are going to have libel and defamation laws (which I have mixed feelings about), everyone should be allowed to avail themselves of the opportunity to obtain compensation from those who have 'wronged' them.
> Your position is ridiculous... It's like expecting flash sites to work when you don't have flash turned on.

Not really. Nobody is expecting JS code to work without a JS interpreter being available/enabled. Instead, they're expecting a page of text + images to work without any JS code being required.

In your analogy, nobody expects Flash objects to work without Flash. Everybody expects text + images to work without Flash objects being required.