skysight-inc/HackerNews huggingface dataset:
If human drivers can deal with it driverless cars certainly can. Driverless cars aren't too timid to accelerate at 100% for a merge or to dart across a break in three lanes of traffic to take a left if the vehicle is capable of doing so effectively. Most people are.

If anything uncontrolled intersections and high speed difference merges (200ft radius 270* on ramp I'm looking at you) more efficient to handle with driverless cars, provided they're capable of identifying the road (easy) all the non-static participants (hard).
> The BEAM VM was being worked on in 1992 a year after work on Java in 1991.

You're right. What I meant by "still earlier than Java" is "still earlier than
first public Java version", so there was no possibility to borrow anything.
How is the performance?

Imho, we need an equivalent of the "great programming language shootout" for all the AltJS languages.
What makes us stronger: New research shows even severe stress can have an upside
The paragraph on wrapping all of your global variables in a single static array nearly killed me. I've seen a global Dictionary<string,object> for that exact purpose, followed by the proud exclamation "I'm down to a single global variable".

This was in a brand new tool, the programmer was responding to increasing pressure from peers to remove global variables in code. Magic.
Odd to see an article complaining about MS's "closed" ecosystem after all the work MS is doing to open source things, provide tight Linux integration, etc.
It doesn't even have to be regulated per se. For example, Economists aren't regulated the way that actuaries are, but they still have widely agreed upon format and process for how to get people from grad school to employment. It doesn't matter whether you want to work in the Econ department at Harvard, The World Bank or a consulting company like Deloitte.
By comparing it to "1+1=3", you seem to be hinting that "pain + reflection = progress" is false. Is that actually your belief?

Or do you believe it to be true but merely creepy?

(Personally I consider it to be completely true. Most of my personal progress has come directly from pain, reflection, and then deliberate effort. Where does your personal progress come from?)
Ok everyone, post your favorite extremist blog with a geocities layout since mainstream media will be incapable of covering this
A Plane Just Flew Around the World Without a Single Drop of Fuel
HN has weird beliefs about the company-imploding properties of all sorts of bugs, from this to CSRFs that let you delete photos from Facebook. After all, a competitor could use it to erase all the photos on Facebook and then take over the market!

That was an actual argument on a thread about Facebook underpaying bounties.
> There's nothing about being an atheist that promotes hatred. There isn't a holy text for Atheism that tells people to believe or do things.

On the other hand, there is nothing in atheism that can possibly say that anything is wrong. If the material universe is all that exists, humans are fundamentally no different from mosquitos or rocks. Killing a handicapped person because they inconvenience you cannot be seen as essentially worse than burning a leaf. In short, atheism provides no reason to do or not do anything other than "because I want to".

By contrast, if someone claiming to be a Christian wants to commit murder, they can only do so in opposition to the explicit commands and teachings of Jesus and of the moral laws they claim to believe.

By no means does this imply that "Christians" will always behave better than atheists. But at least there is ground for defining what it means to behave "better" and to argue for such behavior.
"the only winning move is not to play"?
Right?

Never mind that thoughtfulness of design is a requirement to understanding complex distributed systems. And before we go off saying that few developers need to know how to program distributed systems consider that even a modern processor is a tiny distributed system.

This idea that genius will spout forth from the hands of the programmer in the spur of the moment is hogwash. If you believe this then let's make a wager. We'll pick a simple, standard algorithm. I'll give you the requirements, you implement it. I'll model your solution and run it in a model checker. I bet you that the checker will find an error in your implementation. Simple, right?

A colleague of mine did this to his students. They had to implement binary search. The majority of their solutions had bugs. These weren't under-grads.

Programming is hard because thinking is hard and we deserve the best tools we can find to help us think clearly and precisely. In the real-world we can always just add a fudge-factor to make up for our uncertainty while computers are infuriatingly discrete systems.

This flow of "thinking in code," is simple-minded ignorance. Think in code all you want. You won't be able to solve the hard problems that way. You'll just write sloppy code.

... </rant>
Seems Twitter's increasing abuse problems are causing everyone to leave.
You should give one of the OCaml languages a try. OCaml or F#. They have some very pleasant properties.

Generally this whole idea would make sense when you are writing a web application and you are using OCaml or F# on the server and want to use it for the client code too. Same justification for using node.js, but in reverse.

But I know that the Ionide plugin for Atom and VSCode is written in F# compiled to javascript just because the developers like to code in F#
It depends on the nature of the bug, right? In this case, the bug would make me much less likely to ever recommend LastPass.
Do you know about the AWS free tier? You can get an EC2 micro instance for free for 1 year. When it runs out it might be worth switching to Digital Ocean.
I think this is a large part of why Finance pays so well. You pay more when the environment sucks, so people who want to be paid well have a large incentive for continuing the trend. Sadly, it works because having an unethical staff and an incentive structure can pay off when tricking customers is the #1 way to make money.

Ex: Do you know every fee pulled out of your 401k? Most people I asked did not even realize there where any costs associated with their company's plans.

PS: It's not just the poor/middle class falling for this. Look at average VC returns with and without their 2/20 fee structure.
Forget What You Heard: Jupiter Does Not Orbit the Sun
MH370: Missing jet 'could be further north'
How care apps for the elderly could disrupt tech's obsession with youth
This is completely unfounded and tinfoil hat levels of conspiracy.

If they stripped Win32 out of Windows, it wouldn't only impact Steam, but Microsoft Office, Visual Studio, Photoshop Suite, Chrome/Firefox, iTunes, their shiny new Linux tools, etc would also be out.

This goes against the ethos of Microsoft. Criticise them all you wish, but they're absolutely obsessed with backwards compatibility and always have been. They know the ONLY reason Windows is popular is because you can throw in a piece of software you purchased in 1999 and it will "likely" still work. If they dropped Win32 entirely, then Windows is interchangeable with a Chromebook.

Heck up until 64x one of their test cases was if Doom (released in 1993) still ran. They only stopped because 64x doesn't support 16 bit.
Mercedes-Benz shows off the first fully electric heavy urban transport truck
Yes. It's a bit hard to do so for games, but doing so makes it SOOOOOOO much easier to port if you have to. After all a test is basically a port to a system that has a different graphical, windowing & input system (none, none, & simulated).
Be careful about browser integration https://github.com/pfn/keepasshttp/issues/258
Google bought Android out of fear that Microsoft's dominance in smartphones would lock them out. Its dominance is ancient history, but it was there.
http://bfy.tw/6w16
pass is as safe as your gpg installation and your gpg key because that's the encprytion it uses.
php developer talking about
"It does not matter how many people use framework X."
and
"Never do requirement analysis. Never write technical requirements or functional ones. If you do, you have already failed."

Trolling at its finest.
How did you go from However, because of the amount of testing and approvals that are necessary to deploy them, it's difficult to do this on a monthly basis for all our devices. It is often most efficient for us to bundle security updates in a scheduled Maintenance Release (MR) or OS upgrade., which is a quote from Motorola, to Motorola announcing that they will stop updating their phones with the new security updates.?

Keeping up with the monthly updates would likely be preferable, but batching them is still a long way off from how you've characterized it.
9 hours is for the 13.3 inches model. The smaller model is claimed to last 11 hours.
Sorta like how the web gets progressively worse with each modal pop up ad.
So no more PM, AM, AD, BC, DIY, ASAP, LOL, Dr, PhD, OBE, KBE either I guess.
Audit Cross-Account Roles Using AWS CloudTrail and Amazon CloudWatch Events
I imagine Android on PC sounds pretty good for casual gamers.
That happened 25 years ago, and even the guy who wrote the code has been dead for eight. I don't think it's a solid data point for predicting what Microsoft is going to do tomorrow.
Which is why we need government action, it's the only way.

Unfortunately, many of the world's large countries are democracies, and it's hard to, say, ration meat consumption in them. It's too easy for power-seeking populist politicians to gather votes from people who like meat by telling them that sort of thing is nonsense and a left-wing conspiracy.
Game developers have many choices. You can throw a game up on your websites and sell it yourself.
You can sell it through GOG
Humble Bundle
Steam
I'm sure there are others. With UWP you have no choice, it goes through Windows. The concern is that Microsoft is making it so certain features won't be available to your program if you aren't sold through the store. There won't be any competition. If you sell a non UWP app through some other market, you will not be able to use those features.
An interesting project and welcome to Hacker News.

There is a monthly "Who is Hiring" thread where the community believes it appropriate to post job offers. The thread is posted at 11am Eastern on the first business day of each month. The next thread will be on August 1, 2016.

Otherwise, posting employment offers is generally discouraged, though the site allows companies directly affiliated with Ycombinator some latitude.

Good luck.
I'd much rather them forget reverse compatibility and fix the core problem once and for all. I personally like gb and the ability for each project to be its own GOPATH.
Surprised to see this made it to the front page of HN, these logos look pretty poor to me. I'd imagine any old logo generator could spit out something superior to these in a few minutes
To be fair, this bug is pretty nasty because it allows anyone to get all your stored passwords. That's like the core business of LastPass. LastPass leaking your login credentials for e.g. online banking is really not comparable to deleting Facebook photos.
Dashlane is really good. Running 100% in AWS and leveraging a lot of their security features.

Here is their security white paper : https://www.dashlane.com/download/Dashlane-Security-Whitepap...
This will be the day I abandon Windows completeley. Right now, I only use it for games anyhow. But as you said, it will probably be a long way, with enough time to make alternative arrangements
I....don't get your math.

Additionally, Apple mobile devices are typically in use longer than Android (updates available, hardware+screen more robust than the majority of Android devices), so 85/15 sales doesn't translate directly into 85/15 install base.
I have worked places that put very close to zero bugs in the wold, and buggy messes. The problem is customers don't care or are already locked in. How often do the people buying corporate software actually use that software?
Serious question: My impression is that when Verizon bought Yahoo (for 5 Billion), this was a pretty standard affair M&A. However, this Gigafactory has the same price tag but is met with the question "Does Elon Musk have more money than sense?" How are M&A purchases different from direct investments in a company?
It could also be how they made QuickTime very (more?) unstable on Windows, or the IE extension in OS 9 that WOZ proved to cause the OS to crash.
You can do a lot in your own life that will also save you money. I won't go into too much detail because, as you note, this has a small effect unless lots of people do it. But some simple ideas that are cheap and boring.

- Eat less meat or cut it out fully (or at least not every day)

- Fly less and use long distance trains where you can

- Insulate your property to reduce energy use

- Ride a bicycle and take public transport rather than drive (or get an EV)

- Install solar power / battery storage / heat pumps

- Switch energy supplier to a green provider

However, to be effective beyond that you need to do things that scale and have a multiplying effect or bootstrap/kickstart a virtuous circle. This should be a familiar principle for the startup crowd on HN. Some simple ideas:

- Write about your experiences in green living online

- Get a job in a green industry (lots of them need developers)

- Help others get jobs in green industries

- Invest in green companies (crowd funding etc.)

- Divest from fossil fuel (pension choices etc.)

- Join a community group and donate your time / skills

For example, I help run a community group called Cleanweb UK and we have a free jobs site (https://cleanwebjobs.com) that tries to get tech workers into jobs that help fight climate change. Friends of the Earth often run hackathons.

You could also make tools to help people who are trying to reduce their carbon impact. For example, I built https://shutdownscanner.com to help office managers measure how many computers are left on when not in use. There are many opportunities to build tools that assist in demand shifting and other green data based systems.
I think it's a bit of bucket A and bit of bucket B. Still even if one accept the definition you put forth the argument that having such low bounties makes LastPass look bad/like they're not caring is still valid.
How does paying extra money address the underlying concern that LastPass has absolutely trivial regex bugs that entirely defeat the security of the product? I agree that the bug is terrible, but the bounty and the impact of the bug to the company are largely orthogonal, unless the bounty includes a confidentiality term.
Buy less stuff ? I'm surprised no-one here has say here that the growth-at-all-cost way of doing business is one of the major reason behind global warming.
Not completely dead but close to it. To the extent that they provide funding for government infrastructure, business loans and the like, they're productive. But AIUI that link is pretty thin these days.
No, it is not at all "bucket A" and "bucket B", and suggesting otherwise is a grave insult to hundreds of researchers who would never dream of attempting (and, of course, inevitably failing) to "sell bugs to the black market". Finding interesting vulnerabilities in software makes you clever and talented, not sociopathic.
The mere act of an employer being so open and transparent about this would make them a more interesting option to me than any competing slightly better offers.
This is literally the closest I've ever come to encountering another Nick Cave fan "in the wild".
5 Things You Need to Know About Apple and Android Pay for In-App Purchases
I wonder how much impact the UK's withdrawal from the EU will have on the ESA and future missions.
"On the other hand, using regexp to parse the URL when it's such an obviously security critical code path... just, why?!"

Why not? URIs are at least able to be tokenized perfectly well by a regular expression. You have to do it right, but there's little guarantee that your non-regexp code will do it right either. I glanced at that regexp and immediately recognized several potential problems with it... will I be able to do that with your non-regexp code?

To concretize the "several potential problems": 1. You generally don't want to parse arbitrary protocols, you should do something like (http|https|file) or whatever set of protocols you are ready to receive. Usually you're better off treating anything else as "not a URL", but consult your local security context for details. 2. Failing that, you want at the very least .⁎? to stop matching at the first :, or if your engine doesn't have that, the protocol ought to be matched with something much tighter like [a-z]+. And I do mean + and not ⁎, because you probably don't mean to support an empty protocol before the colon. (You may mean to permit URLs with no protocol, but that's (.⁎?:)? .) 3. Domains should be parsed more tightly than "not a slash". 4. Also, I have no idea what the @ was doing there. Perhaps it was trying to be $; URL parsing should always end with the "end of string" matcher to avoid problems similar to this. It should also start with the start-of-string matcher, which this one doesn't, for similar reasons. 5. Bonus critique, anything using regular expressions to URL-encode or decode is very suspicious; strongly prefer built-in functions that do this.

I literally saw all this faster than I could type it; does your non-regular-expression based code have this property?

Regular expressions aren't bad. They're hard to write properly, but still probably easier to write properly than anything else. It turns out the underlying problem is fundamentally hard.

(Had to use an alternate asterisk to get the RE expressions correct with HN trying to format it.)
"The world construction rate peaked at 30 GW of nuclear power per year in 1984"

...

"The rate of new build was biggest in 1984, and had a value of (drum-roll please...) about 30 GW per year – about 30 1-GW reactors."

https://www.withouthotair.com/c24/page_171.shtml
The Chinese and Indian markets are just now beginning to wake up. Even if it were reasonable to say anything is ever settled in the technology space (Blackberry anyone?), given that companies coming out of these new markets are sending clear signals they intend to make their own way, given saturation of the mobile market in these economies is incomplete, given their governments' are more explicitly hands on with issues of technology and it's social implications, given their clear break with U.S. policy on I.P. (be it technology or pharmaceuticals),,, I'd hardly feel comfortable putting my money on the "it's all settled" bet.
>> Reducing the population takes a lot longer.

There are also involuntary reduction methods...
You can install UWP apps from other sources. Side-loading is enabled by default since November.
I doubt that. Google bets on cloud solutions, so you can get Google "OS" on any device that's capable of running a modern browser.
It is not true that pure black text on pure white background is a better user experience for most people. It might be better for a small minority of people with vision problems.

While it is reasonable to argue whether #555 is the exact right level or not, the point is you need you need to make the contrast less harsh than black on white. Otherwise its just fugly.
>We are a small company and don't have any security experts, etc.

Find one.
"misery that extreme weather will inflict on us"

This misery will be very unevenly distributed. Most people will trade one weather for another. Some will definitely benefit. A good portion will probably see their current place uninhabitable.
Isn't this a less polished version of Elm?
I'm OK with choosing to take on pain to grow. I do, however, find it creepy when a company's publicly stated values glorify pain.
The day that Win32 executables don't run on Windows is the day that Windows irretrievably jumps the shark. This is a company that has gone to sometimes absurd lengths to ensure compatibility with out-dated third-party software. There's too much legacy code out there, and too much legacy code still in active, important code bases.

I'll start worrying about the future of locked-down UWP applications once I start seeing anybody build some that are more than gimped versions or toys. Wake me up when Visual Studio or SQL Management Studio is rewritten as a UWP app.
Calling someone a fanboy is now considered violence? What sort of rhetorical genius convinced you of that?
It's true that not all companies pay bug bounties and you might very well be right that paying them, especially if they are much lower than other companies that operate bug bounties, might have a worse affect on public opinion then not having bug bounties at all. To me it's still concerning that Facebook pays 10x more for problems that are less severe and it does still make LastPass look like they don't care as much in comparison.
This has been covered elsewhere (like on serverfault: http://serverfault.com/a/107346/2557 )

But it comes down to:

- Take existing server down immediately. I'm assuming it is not on an isolated network -- so this should really be a priority.

- Prep a new patched server (with a smaller attack surface and updated security credentials)

- Postmortem the old box on an isolated network. Try to understand how the attacker got in. If necessary, get security professionals involved.
I think the UK will continue to participate in the ESA, since they are different organizations for different purposes.
>The Bolt is probably the closest competitor to what Tesla is doing right now for EVs.

The Model S is 2x the price (and 10x the car). I don't think they are competition.

Or do you mean the Model 3? As of right now it's nothing but a prototype, so I'm not sure that's competition either. Theoretically it will be $30k with 200mile range, but I'm skeptical.
If only science not religious anti-science sediment ruled the earth then they would have just used a nuclear battery instead.
> It's impolite to use a new, throwaway account

He probably wanted to avoid getting downvoted like I did.

Apparently being correct earns one a downvote these days. I guess I'd rather be correct than have karma, anyway.
This has nothing to do with elm..
Could even be better. I didn't say anything about the value of the laptop, just whether or not I consider it a macbook air clone.
Does it need to have Windows client? I'm guessing yes. If not there is [SFLVault](http://sflvault.org/)
That's weird, I thought apt-get update && apt-get upgrade && apt-get dist-upgrade was upgrading my system. I must have been imagining it.
A couple of things that stood out.

1) I'd imagine stock options are part of the job, but I don't see that anywhere. Do new employee's get stock options? I'm guessing they keep this hidden as it allows them a bit more flexibility on offering signing bonuses to entice employee's they want to hire?

2) I don't see any section for bonus on the calculator. Do stackoverflow employee's not get bonuses?

3) Why are years of experience factored in at all? Shouldn't ability matter more? I mean you seem to get a different salary if you have 15 vs 16 years of experience. This just seems very arbitrary. Wouldn't a more granular bucket be better?

As to transparent salaries...

I've worked at two firms for the past 10 years and both have complete salary transparency. The sky hasn't fallen, and I don't hear very much complaining, though there still is some complaining, the upside of the complaining is that its over actual salary numbers rather than guessing numbers.

We allow people to pick from a couple of buckets of salary and bonus multipliers. You can chose a lower salary and get a bigger bump on your bonus vs a large salary and a lower multiplier on your bonus. This lets risk adverse people get more upfront and leave a bit of the upside on the table and people with a higher risk tolerance to bet on themselves a bit more.

Has anyone actually gone with salary transparency and seen a downside?
Some Silicon Valley Tech Workers Get Home Loans with No Money Down