skysight-inc/HackerNews huggingface dataset:
Regarding the paper you cited, that doesn't really address the core issue and sort of misses the point.

1) The issue isn't just modifying vtables; again, that's just a classic example intended to highlight the issue. Both C and C++ code can and often does juggle pointers to regular functions.

2) The referenced mechanism to protect vtables and calls through vtables _rely_ on the much stricter language semantics regarding method invocations. My entire point was that by enforcing some of the restrictions C already guarantees regarding function pointers, we can more easily implement similar approaches for C and C++ code directly manipulating function pointers.

Your example about void pointer cookies for callbacks is perfect. Restricting conversions between function and object pointers makes it easier to add instrumentation to verify integrity. I'm sure it's possible to do that without such limitations, especially with your particular example, but it adds complexity and removes opportunities for optimizing away the cost. Undefined behavior helps compilers improve performance because it simplifies the model compilers require for proving the correctness of generated code. That same dynamic also makes it easier to implement and enforce security constraints. That simpler model can allow the compiler to assume a pointer is valid, but it also permits it to more easily detect and abort the program when it isn't without violating the contract with the programmer.

Contrast that with a language that permits you to dynamically update code sections by poking and jumping to memory anywhere. That permits all kinds of fun hacks, but it means the compiler can't enforce any meaningful constraints. There's a huge middle ground between that and a language like Rust or Haskell.

I find it odd that people will in the same breath claim that C is a security nightmare and should be abandoned, yet argue to preserve insecure semantics that could be easily removed and in many cases are already disallowed by the standard. That's a harmful cognitive dissonance. To be clear, I'm not accusing you of that; but I find your arguments to be uncomfortably close to that misguided conception of C and the C ecosystem.
The reordering thing is bunk anyway, because if you just define the reordering function:

double IntPowerOfDouble(int power, double base)
{
return DoubleToTheInt(base, power);
}

...then gcc with -O1 will optimise IntPowerOfDouble to a plain "call DoubleToTheInt", and with -O2 will completely inline DoubleToTheInt into it.
US approves $1.15 bn tank, weapons sale to Saudi: Pentagon
Chappie Swarm: Persona-Driven Web Corpus Generation
> the necessary level of engagement (and notifying them when that level changes) is going to be increasingly critical.

Is there an "uncanny valley" style term for this?
There's no inconsistency between those two statements. And "figuring out how to communicate to users the necessary level of engagement" doesn't solve very much either. For example, if the car's sensors can't detect a rapidly accelerating gold-colored SUV, how will the car ever be able to tell you "ok, now it's time to watch out for gold-colored SUVs"?

Ultimately it comes down to what a different commenter pointed out, that drivers need to have adequate understanding and expectations around this car and its capabilities.
Re "Jevons Paradox". That doesn't mean employment goes up. There's a little book, "Chapters on Machinery and Labor", from a century ago which outlines three ways this worked out.

The "good case" was mechanized typesetting, the Linotype. This produced a huge increase in print shop productivity and a huge increase in the amount of printed material. The result was an increase in printing employment (That lasted until the 1980s; printing today is almost dead as a trade, and print shops have few people in them.)

The "medium case" was glassblowing. The introduction of automatic bottle-making machines did automatically what used to take a skilled team of five men working closely together. Bottle consumption went up sharply, and but employment in bottlemaking did not. The skill level went down, since feeding a bottle-making machine isn't that hard, so wages dropped.

The "bad case" was the stone planer. This was a machine to make stone lintels for the tops of doors and windows in brick construction. The stone planer made it much cheaper to do this. But lintel consumption didn't go up, because lintels are a small fraction of building cost. Lots of men with hammers and chisels become unemployed.
One of the most sensible pieces I've read about either subject.
I am reminded of a quote "Happiness is living without expectations"

The favorites in a competition will have much higher expectations than the rest.
That's probably because it's not running the second line in the JS code for OP's extension[1]:

document.querySelector('[id*="signup_wall_wrapper"').remove();
document.body.classList.remove('signup_wall_prevent_scroll');
console.log("Quora wall bypassed successfully. Carry on.");

[1]: https://github.com/sdegutis/bypassquora/blob/master/myscript...
Almost refreshing to see a number so reasonable in a US lawsuit.
Evil seems to get some things wrong or weird. If I use the mouse, then using . to repeat last edit doesn't work. I've also had issues using macros sometime.

It also seems to have severe performance issues. Maybe it's Emacs, or rust-mode. But, say, running a macro 1000 times on a 10K line file is far slower than using vim.

But overall it's pretty great. I have the feeling it's easier to configure, once I get familiar with Emacs/elisp.
Tesla shares are going to $0 – Marc Faber
Economists and 'social entrepreneurs' prefer the term developing world or developing countries in contrast to developed countries.

Countries can be evaluated using the Human Development Index to determine their designation.
I agree with the question though maybe not the assumption that goes with it.

I imagine professional workstations for industries such as software development, visual arts, industrial design, film production, music production etc. are large users of high end CPUs.
I love my fuji. But x-trans processing is a real pain point, so this is cool. Case in point; google photos won't process any RAF files uploaded. Someday, I assume. But, not ideal for someone who shoots raw.
Human nature is the least productive concept ever. It is only ever brought up to defend the status quo and declare it as inevitable. It is a mystical concept impervious to examination. Whether it's "God" or "human nature" it's just a term for an abstract master that keeps us all in bondage.
Why? It's a common op that requires internal knowledge of every microarchitecture, isn't it? Seems like something that should be totally offloaded to the CPU so you're guaranteed best performance.
Australias newest, most high-end infrastructure for internet access, the NBN, is based on a mix of 100 year old Telstra copper for last mile (in reality last 4 or 5 mile) connections, 40 year old HFC cable if you're lucky, and if you happened to be really lucky and in an opposition party area when it was originally planned, a little bit of fibre in neighbourhoods. Its an abysmal abuse of the phrase 'cost-savings' as its crippling any attempt to introduce new, more advanced services that need more than about 20mbit continuously...
Golden handcuffs.
You haven't actually explained anything - you've just made a statement. Why shouldn't Apple be able to ship whatever product they want? Why should banks be able to force an API on them?
Another reason to use https, if you don't want routers filtering your website's content.
Whether you're a fan or not, Bitcoin is clearly being used as currency. It would help if those adjacent to it would treat it as such so that less people are taken advantage of.
How do you know you just didn't get bored with your old ideals and just moved onto some new thing? "I'm older than you" has never been a convincing argument, and the fact that you're bringing it up seems to indicate that you think it should have some moral weight that it does not.
> Each and every person in Iqaluit is free to move within Canada however they wish, vote for who they wish and exercise all the rights and freedoms of any other Canadian

The absence of those abilities is not a defining character of the Third World by any definition I'm familiar with.
Ah that thread is great and answers my question. TL;DR seems to be that rep+mov is as fast as anything now.
Lidar alone is not enough, as it relies on the certain reflective properties of objects around (and there's also solar light noise).

But yes, they ought to add a lidar and more cameras so that there's 360 coverage with a good overlap, and a single failed sensor does not disable the ability to auto-drive safely.
The term "driver" will still fit. We apply it to someone guiding a camel to a destination.

I think the point is we're trying to make cars into high-energy horses or camels. I'm thinking of the ponies in Iceland that get their farmers back home after a night heavy imbibing. So long as you got on the right horse, it'd take you home. Yah Tesla!
Well, up until the stories started coming out, Amazon was (and still kind of is) a "big name". So if one of their recruiters comes calling, most people were willing to follow. They'd get their salary and stock golden handcuffs, and by the time they realized the truth, it's too late. You can't leave for a while because of the handcuffs, and what it looks like to leave an employer, especially one like Amazon, within 6 months to a year.
Android is under constant attack and there are huge botnets and malware. Just because a particularly bank hasn't been hit doesn't mean that money isn't being stolen.

ApplePay is already operating at scale in numerous countries without any incidents. Why wouldn't you trust Apple with an already proven system?
>I got the opposite impression - that it's an exploitative industry that preys on the needy.

I'm curious what you mean by that. By "needy" do you mean the people answering the phones, or the people calling?
Optimal for whom? What is an optimal use of spectrum for me will probably not be optimal for most people.
Browser content has to support all the features and they add up pretty quickly. For example a large scrolling list with thousands of items can be solved by a gamedev by mandating all content be the same size and applying a tiling rule. A list in a webapp is likely to be held to a higher standard and so needs to consider heuristics to find the position of content, dynamic updates, etc.
Its a totally reasonable decision to target an audience, that I might fall outside.

My primary thrust is neither the 'Actuals' copy on the landing page, nor the 'Actuals' explainer video explain the term. (OP has explained it elsewhere on this page, thanks!)

Secondarily, I wonder whether this should be targeted exclusively to accountancy folks (which I'm not) or also Data Science/ Statsy folks (which I am, and who are increasingly helping high tech companies with their financial modeling).

The latter group is definitely a smaller niche, but might have more of an awareness/interest in what Invrea is doing; maybe not, but if I had to guess, I'd say there's a big customer education challenge targeting accountancy folks.
Show HN: Quotes about Web Caching and Performance
Thinking a further bit down-range there probably ought to be Smart Roads that cooperate with the vehicles to a) keep them apart, and b) keep the moving in the proper way.
>You can be honest without being an asshole.

Not always. It depends on the culture. Some people will think you're an asshole just for disagreeing with them. Some people will think you're an asshole because you smile crooked. Some people will think you're an asshole because you aren't speaking their language and using their terminology.

Maybe I think you're an asshole just for suggesting this.
It'd be interesting to see the respective happiness of silver and bronze medallists in the context of prior expectations (e.g. betting odds). Presumably silver medallists are more likely to have been the pre-competition favourite to win and bronze medallists are more likely to have not expected to finish on the podium: are silver medallists much happier when they finish behind a massive favourite they never expected to beat, and are bronze medallists significantly less chuffed when the odds suggested they were widely expected to finish somewhere in the top three?

Context of the anecdote the article opens with: Lochte - one of the finest swimmers of all time - got overtaken on his relay leg in a race his team was leading at the time and was expected to get a medal in anyway. Hansen was delighted with bronze in his final Olympics having finished fourth and just missed out on a medal in the same event four years earlier.
> Soliday had more success at United. The airline agreed to help Bateman’s team test it so it could be certified by the FAA, he said. Most other carriers balked. It took another high-profile fatal crash to change their minds.

It's amazing how much blood is required to grease the gears of the world's bureoucracy...
I've been calling this the "deadly valley". The automation is good enough that the driver will tune out, but not good enough for it to be safe that way.
It's fucking simple. We don't need some massive engineering solution, you take a fat red sticker with a no bull-shit message and you place it on the inner windshield of every tesla. Waaaaaaa Tesla marketing. Go fuck yourself. People's lives are more important then your marketing.

Edit: Nvm apparently its ok to market people off a cliff..
Thanks for the peace of mind. I've seen many assassin bugs in my apartment in the Seattle area and sometimes worry that one of us might have been bitten by them and have Chagas. I guess we're safe in this area.
The issue is like this.

I load https://webmail.example.com.

I see my email.

My ISP doesn't see my email.

The NSA (or anyone else who can MITM https, such as my workplace, college, etc.) can effectively turn it into http, and see the content.

We need to fix that.

So I write an encryption library in JS, loaded from https://webmail.example.com . It loads the email through an AJAX call from https://webmail.example.com, decrypts it, and displays it.

The only issue is that whoever can MITMed the connection can also modify the JS file to send the key to a C&C server.

So:

"Dumb" ISP can't read #1 mail

"MITM" ISP can read #2 mail

So what's the gain?

The only concern is that it's an active attack vs a passive attack, so no plausible deniability.

But in most MITM scenarios, you don't need plausible deniability.

1. Your workplace computer and the connection is owned by them, so they can do what they want with it.

2. Dictatorships give themselves whatever powers they want

3. The NSA has enough side-channel attacks to exploit.

So in which situation will a "JS" encryption help?
The Professionals® that actually use a real autopilot tell us that Tesla's is aptly named-- it's limited in its functionality and is designed to assist the operator of the machinery and to reduce fatigue.

The Problem® is one of public perception/branding. Hollywood has convinced the overwhelming preponderance of the population that airplanes on autopilot can taxi away from the terminal, navigate to the runway, avoid collisions with buildings, vehicles and other planes, line up on the runway, take off, navigate to the destination, line up with the correct runway from the correct direction, land the plane, and taxi to the final terminal.

Naming your not-fully-autonomous car driving software "autopilot" is going to have a perception problem. Educating the public after the fact is a hard battle.
Bill Maris Steps Down as CEO of Google Ventures
Hehe, read that one too, even before No more Mr. Nice guy.

It's one of those that's hard to grasp, more of a lifetime read, when you gather more and more experiences, so that the suggestions make more sense.

Those two books, "Models" by Mark Manson and "Slight edge" by Jeff Olson probably changed my life the most.
If you had a new auction every year nobody would put money into infrastructure development. Mobile providers spend billions every year maintaining and upgrading networks - there's no way they would do that if it was possible to lose the spectrum they were using.
Death by HSTS preload copy/paste
AES-NI uses the XMM register bank, but not necessarily any vector execution unit. Furthermore, it only uses the lower 128 bits of vector registers, whereas the linked document is referring to instructions that use the upper lanes as well, i.e. YMM or ZMM registers.
I like this video, which shows the Tesla autopilot in action with the driver-side display (which is usually hidden by the wheel) visible: https://www.youtube.com/watch?v=ZetTg73Ebyo

Looking at it, it seems that the autopilot mostly adds another layer of indirection. Instead of driving directly, the driver gives the autopilot orders like "maximum speed 60" or "move one lane left/right". The driver still has to pay attention to what's happening around to give it the correct orders. In the example given in the article, the driver still has to check whether the lane is free before giving the car an order to move into that lane.
I mean true, I'm playing devil's advocate here. I respect the Rust community (heck of all the nu-c languages I respect it the most, I even did a poster on 0.1 of it for my programming languages class), I will be quite impressed if they can pull off (and they are the most likely to be capable of it in my opinion) what so far has been an insurmountable task: beat an old guard language in general purpose performance (Fortran, C, etc.); languages that have every advantage but design foresight. If they do it, it will be a great historical case study on how to build a new programming language.

As an aside: As someone who has used LLVM to build a compiler, it doesn't quite work that way, yes rust has access to those gains, but it may not be able to effectively use them (due to differing assumptions and strategies).
Why are some Bernie Sanders supporters voting for Hillary Clinton?
What editor is that?
You could go on, but you're never going to explain how your communication has actually worsened because you are unaware of it.

Hell, I could give you a good dozen examples of interesting things that can't be communicated properly over long distance, but I'm never going to prove that here, am I? You're never going to understand how confident or uncertain I am. You're never going to grasp an idea that isn't already weighed down by the bias of my word choices and take it with it's natural abstract flexibility and apply it on your own terms.

So I won't take you at your word.
Not yet, but the basic idea is laid out in the ebook by Robert Graham about cold calling for customer development. Here is his blog post about it:

http://blog.asmartbear.com/cold-calling.html

A careful listening to Mixergy interviews shows two or three of his guests have used the same strategy to get started. It is a very general technique, but it also has a significant level of effort, so you can't really do it in multiple niches at once. Thus, any one person won't have valid statistics about it.

Someone should really write an entire book about this general approach. I think it would still work even if your targets knew what your goal was.
Great analysis. The thread he links actually corroborates it, too. I've even found a few more safer, system languages since then that may be featured in future lists or threads.

To be fair to me, though, note that I also heavily promote memory-safe C (eg Softbound, SAFEcode), memory-safe UNIX (CheriBSD, SVA-OS), and user-mode UNIX (eg seperation kernels, GenodeOS) to help UNIX/C users reduce serious problems they might encounter. I just default on countering root causes of problems as first resort. ;)
The fact of the matter is that your average employee who lasted a year at Google is probably significantly better than their startup counterpart. Having this stamp of approval on your resume gives you a lot of bargaining power in the job search process. The churn at these companies is very high.
Auto-pilot => autonomous piloting.

http://www.merriam-webster.com/dictionary/autonomous

3. Existing or capable of existing independently. But no its totes a public perception problem.
My experience is just as an amateur, so it's only worth so much. I'm pretty sure though that the difference was much less than a factor of two.
Thanks for the suggestion! I do some more research and explore this option. :)
True - and it's complex - but you need to keep the capability of your adversary in mind.

This will thwart your nosy flatmate/little-brother.

This is reasonably likely to keep curious or nosy corporate IT or HR staff at bay if you use it at work. It's not going to keep a properly authorised and resourced corporate IT investigation/surveillance out - at least not for any hardware that's got corporate ssl roots installed (or device management that allows installation of those).

It'll likely keep local cops out. It's less likely to keep feds out if they're determined. It 100% will not help against people who've got browser trusted ssl signing roots and the ability to run QUANTUM on exploited backbone routers to deliver their own versions of the javascript appropriately ssl encrypted to you before the actual site has a chance to respond.
To be fair I'm more of a hobbyist - who writes game-engine-esque code (I never said what kind of engine programmer I am did I) for my day job (pays better) - that just builds game engines for fun (like the last 10 years now... but no games). So some details are likely wrong, I'm kinda super curious as to your nits.
It looks bad that the Tesla didn't detect the SUV. But on the flip side, if the SUV had also had Autopilot, maybe it would have been a less dangerous situation. And when more cars have autopilot systems, maybe they'll be better able to communicate their proximity to one another.
There should be, and the best candidate term is "Children of the Magenta", a term describing pilots who are too dependent on the Magenta lines on their instrumentation.

99% Invisible did a good podcast episode on this a year ago: http://99percentinvisible.org/episode/children-of-the-magent...

Their follow-up podcast episode talks explicitly about this problem (first seriously discussed in the context of airplane automation) becoming important in the context of self-driving cars, and how Google is very aware of this (hence Google's push for 100% automated cars, since the middle valley is so dangerous).
At Amazon years ago, a director once told me "SDE3s are very happy, SDE1s are just happy to be here, and every SDE2 thinks he should be a SDE3."
To be honest, I'm not sure. Is it common to share salaries with your peers in this industry because I'm not sure what anyone else gets paid.
> Had only been there a month or so, and I think had I been able to explain to the owner (a tech guy, and decent business guy) what I'd done, he might have understood. My cube was only 30 feet from the guy. In my eyes at the time, though, I thought this wrath was coming from him through someone else. Looking back now, I doubt he was even aware of it.

He probably didn't know about that situation, but he should have been aware of the billable hours culture and the problems that was causing.
Just even hint at criticising MICROS~1 and you get voted down, wanna talk to a sex pervert and that's ok on ycombinator.com, you people have some strange priorities.
13W LED T8 Tube Light 864mm G5
Meetings.
People love meetings. It is much easier to have face to face meetings if you are in the same area. Of course the meetings are mostly pointless, but people still love to have them.
Even in an environment where you can do 90 - 100 percent is your work remotely they still insist on you coming into an office. Even though slack or Skype can handle most meetings.
Oh awesome, thanks for the info. I'm watching a CBC stream and it's CBC branded -- but I know NBC and BBC show the same footage, and at least BBC the same commentators.