skysight-inc/HackerNews huggingface dataset:
It's not just you, as I was scrolling the article I was looking for "what's the improvement over other frameworks like ActiveRecord or Sequel?"... I didn't see anything.

Anyone have commentary on why one would use this over another more mature framework?
Exactly, that's my friend who's suffering, he bieng a US buyer, I'm pretty sure that there will be a local customer support team who can help him.
You can also use a pattern login to decrypt at boot and unlock at login, contrary to what the grandparent comment stated.
Php is the polio of programming. It catches you when you are a still young to programming, and cripples you for life (Or a very long time)...
Like uber, they we're able to use a legal shell game to dance around the DS and Ghanaian plods. Their operations continue elsewhere.
Not really, these are just non parametrierend SQL Statements. It doesn't mean that the variables in the SQL Statements have not been sanitized before hand. [1]

It may not be best practice but doesn't automatically mean SQL injection vulnerable.

And this is not limited to PHP

[1] https://github.com/laurent22/so-sql-injections/issues/1
Every day you (and other people) vote with their wallet which company is getting their money. So simply vote against Uber and inspire lots of people to do so, too, if this is your opinion.
It's important to note that the author seems to be flagging injections based on the use of a PHP variable in the query string ( https://github.com/laurent22/so-sql-injections/blob/master/s... ).

Although a strong indicator, this does not necessarily imply an SQLi. If the variable is sanitized before the query (for instance, the variable is cast to an int), there is no SQLi to exploit.

So it's very possible that these graphs are riddled with false positives.
It's more an argument for floating point.
I wish I wasnt shadow banned so that the developers could read how much Ive enjoyed using leaflet with a meteorjs project I just started. Big thanks for making my mapping project so easy!
Hmm, yeah, that's possible. My friend's not a regular to HN, I'll definitely ask him to come up here and participate
What I would also find interesting is to do the same exercise on the top responses.
Nice to see wider adoption of ZKPP authentication.
Upvoted; I'd like to defend ethics here from the other respondents. Despite what may seem counterintuitive to making money; there is a positive correlation between company success and ethics. An ethical
company is more likely to have ethical staff and ethical staff are less likely to cheat the company. This rot from within is often a companies biggest risk.
Man, atleast mention salary and your expectations from candidates. In its current format only total desperate will email you.
It is more than a strong indicator.

But I think the absolute % is missing the point. What I find interesting is the evolution. It doesn't go down.
Serious question: why bother with the current Uber service? Why not just focus all money on self driving and not spend money on subsidized rides.

My guess is that self driving is a scapegoat , and that their business model is more simple: push driver wages down + surge pricing + extinguish competitors. No need for tech there.
> Right, but the point is that to date, being careless about asking for an atomic type explicitly would not lead to buggy behavior.

That's already the case: simply reading a 64-bit integer in a 32-bit processor is not atomic, and that's already possible today.

But that's not a problem in Rust. How would you access the same 128-bit integer from more than one thread?

- You pass the thread a copy of the value: the thread's copy can't be accessed by any other thread, so whether or not it's atomic doesn't matter.

- You pass the thread a mutable reference (&mut) to the value: one of Rust's rules is that there can be only one &mut to a memory location, and while that &mut exists, nothing else can read or modify the value. Therefore it's the same case: only one thread can access the value, so whether or not it's atomic doesn't matter.

- You pass the thread a non-mutable reference (&) to the value: another of Rust's rules is that while any non-mutable reference exists, nothing can modify the value, so the reads not being atomic don't matter.

- You wrap the value in something like a Mutex: the Mutex has a lock which prevents concurrent accesses in the middle of a write.

- You use an Atomic version of the 128-bit integer: this one doesn't exist, so can't be used.

The main reason for all the interest in Rust is that the compiler protects you from many kinds of mistakes. Accessing the same variable from more than one thread, without using a lock or an atomic, is one of the things the compiler protects you from.
Looks like complaints from personal buyers.

I always thought that Dell was for "entreprisey-clients only". If you try to get one for yourself as an individual, you're on your own.

That seems confirmed.
Those worse companies become worse due to corporate pressure to deliver.

But Uber has been like this from the beginning starting with the founder. The body is as corrupt as the head.

I hope Uber fails while bringing about auto driving to the market. The disruption from an Uber piñata bursting will be good for the market.
Yeah, that was my immediate thought. Something like this:

$delete = "DELETE FROM `cart` WHERE id='$id'";

Which is currently among the top three, could be prefaced by the built in mysqli escape function or at minimum cast to (int).

This is not a great approach, the query should be prepared, but it's not inherently an injection risk based on that snippet alone.

And the underlying functions come from the C library for MySQL. Almost any language's SQL libraries will allow you to send an arbitrary string to the database. This is not a PHP problem by any measure.
Owning, repairing, cleaning, maintaining, parking and fueling (re-charging) self-driving cars is fleet management, which Uber doesn't really have a lot of experience with.
The per-lot taxes you suggest are increasingly the way things are financed in California: it's called a parcel tax and when a city wants to raise money for schools and the like, it's one of their few options for passing a new tax, since they've already maxed out the property tax allowed under Prop 13. The other major option for new taxes is sales taxes, but those create a perverse incentive for cities to maximize the number of car dealerships and other commercial property and minimize the amount of new housing they allow, since it's stores that pay property taxes, while houses tend to consume more city resources while paying fewer taxes.
The Whitechapel company is just moving, not going out of business.
I keep hearing that std::sort is faster than qsort yet when I benchmarked it with GCC it was the exact same performance which makes sense as modern compiles are either to optimize function calls through pointers. Anyway, both are significantly slower than macro based library based on removing function calls altogether (not the one in comparator but the recursive qsort calls).

For things I would like to use C for std::vector is not very useful either as it grows in some generic way which is likely wasteful for specific applications. If an algorithm is time-critical then almost by definition the generic implementation in standard library won't be enough.
...the VB6 of the open source world!
Thanks for the link. Found the proposal a really good read.

Direct link :
https://github.com/golang/proposal/blob/master/design/17503-...
separation of the entities and repositories is useful in many ways.

For example, you can stub the repository and avoid persisting objects in tests, and only test persistence in the appropriate ones.

Or, you always know that operations you call on an entity won't touch the database, so you avoid a whole class of problems (think: accidental N+1 queries in a loop).

Or, by making the query interface private to the repository, you avoid accidental leakage of storage details (think: `default_scope` impacting associations)

I believe Ecto/Phoenix adopts a similar pattern http://www.phoenixframework.org/docs/models
Hilarious Teen Girls
"In other words, they are gypsy cabs with a slick app."

My question is how do you lose money doing that? Ignore expensive regulations and licensing, automate the heck out of the backend, should make piles of money not lose.

Maybe the losses are some form of hollywood accounting to keep the fire off the whole "ignore regulations" aspect of the business model.
Yes there are definitely some false positives (as well as false negatives), though the lack of prepared statements and use of concatenated strings like this are usually a good indicator that there's in fact an SQL injection vulnerability. If you manually check some of these questions, you'll often find that the parameters come from $_POST or other user input, so that's why I didn't try to make it any smarter since just checking for "some sql... some $variable" is a good enough indicator.
This another "article" that's really just rewriting someone else's blog post.

There was already a HN discussion based on a link to the original Naked Capitalism blog post about Uber: https://news.ycombinator.com/item?id=13079023

With that said, the actual financial analysis of Uber's numbers in the writeup is so amateurish and frankly incorrect that I can't recommend anyone waste time reading it. I'm not trying to defend Uber's valuation, but this person's math is just wrong. Also the data is stale, just not worth it.
The wallet in some countries is already voting them out, so they break the law to be competitive.
4 links, and the second one is to careers page :)

About skills and salary, it depends on the person. We are a small (7 right now) company. We are more concerned about having colleagues who can contribute, and who would find interest in working with us.

And thats why I wanted to explain our company. Otherwise it gives an impression of just another Indian consulting sweat shop.

I guess, I am not looking for agreement, just explaining. If moderators find the job post to be against guidelines of 'Ask HN: Who is hiring?', I will delete the current post, and be careful about future posts.
Somebody with EE or meteo experience may correct me on this, but the word "circuit" sounds wrong here. Isn't a lightning strike just a point-to-point current from charged clouds to ground (and in the other direction on the return stroke)?
Making sound visible through cymatics
Apple reveals autonomous vehicle ambitions
There is no proof that smarter brain is what was targeted by evolution. It could be that the size of human brain was either purely accidental consequence of other factor or at least was driven by the needs like balancing when walking/running on 2 legs.
Replica Louis Vuitton Online Store
Right - I get that the compiler ensures it is only accessed by one thread at a time.

But what I was asking was at runtime, when ownership transfers how does Rust ensure that writes to the value by the previous owner appear to the new owner before the transfer of ownership appears to the new owner?

You can statically guarantee that only one thread owns the object, but you can't statically guarantee the order in which the processor will apply the instructions your compiler generates, without barriers.

But the other person answered - you need to ensure that there is an explicit memory barrier yourself when you transfer the object.
> Uber can probably negotiate better deals on new cars and service (due to volume)

Same argument could be applied to car rental businesses (some of which are owned by automakers which makes the relationship super-cozy), yet I've never seen a deal from Avis or Hertz to make it a worthwhile replacement to owning.

Big cities have an added cost of parking and extra miles driven to find a gas station or a public charger. But big cities also have low-cost public transportation (or so I've heard, I live in LA).

In smaller towns the cost of ownership tends to be lower and with sub-$10,000 products on the market http://jalopnik.com/5072303/new-pricing-of-9990-makes-2009-n... you have a reliable guaranteed ride whose cost is usually spread over 6-7 years.
I find your usage of the word static ambiguous. Also Julia is more static than you might expect, and besides it's still a compiled language, it just has a `dynamic` type (ala C# for example) as it's default type. It seems dynamic - like most lisps do - because it supports recompiling a function in a running session (however it doesn't change already compiled code, so not that dynamic).
Windows Containers on Windows Host – Step by Step
How many developers in each project?
Ok, I've just hacked a version of this that uses jq[0] underneath, so you can do all the sorts of fancy queries jid originally doesn't support: https://github.com/fiatjaf/jiq

[0]: https://stedolan.github.io/jq/manual/
MusiStep – an innovative music player for runners needs your support
I wish he was still around to ask - http://www.lvbagsit.com/
Dart (the VM version, not the dart2js output) has arbitrarily sized integer types (`int`), as well as fixed-length ones if you need better maths support (SIMD with vector and matrix calculations).
EURUSD Retains Recovery Threats with Eyes on 1.0759 Zone
There are only a few organizational principles that allow the number of groups (K) to scale beyond the number of neurons (N).

Polychronization (http://www.izhikevich.org/publications/spnet.pdf).

This is e.g. different from synfire chains in which the number of groups equals the number of neurons. I don't remember much about the capacity analysis of standard reservoir computing methods (ESN, LSM, ELM), but I thought it was also limited to N.

I'm looking forward to more research in this direction! We as humans build up such long-term memories. This must be a driving factor in AI. A lot of prediction tasks hinge on being able to handle this huge temporal scale.

Currently I'm trying to see if I can formulate chains of transition matrices in MCMC that allow simultaneous search on multiple scales. I feel like the math from multiple angles is converging, exciting! We're gonna solve this in our lifetimes!
I haven't seen any examples (just code snippets), but I wouldn't call all unsanitized queries SQL injection vulnerabilities:

$sql = "SELECT * FROM inventory_item WHERE product_category_id='$pcid'";

The pcid var might have been checked/cleaned up before this line (might even be part of the same SO answer).

-----

Obviously that doesn't mean this is very bad practise, especially at stackoverflow where you know people will just copy and paste your code.
I actually find the cost of renting cars makes a decent amount of sense for me, given how infrequently I use them. However, it's such a hassle, since I've got to go quite out of the way to where they're kept and I can only return them at inconvenient times (or I have to rent for two days because they're not open at the weekend, for example).

Being able to book one to use for a journey then let it go home would be great.
Short feedback loops make programs antifragile
"antifragility" is a concept popularized by Naseem Taleb to characterize a thing that _likes_ variability in its operating environment. This is distinct from "robust", which denotes a thing that is indifferent to variability.

His thesis being: real world environments are not given to control. Plus, robustness comes at a cost. So why not design a system that somehow improves (on average) every time it makes a mistake. His example of such systems being anything that nature designs.

Short feedback (making a source change and seeing the system changed) loops are a way to make programs antifragile. They, ofcourse, do not guarantee antifragility, but they make it likely. The more a system is being used, the more likely.

In case it is not clear: this works by making it easy for people to use "mistakes" to improve the program. These mistakes could be bugs, or could simply be using the program in unintended way, in which sense they can be seen as features. Or could be using the program in an unexpected environment (say, a new OS or framework).

Interestingly, this works better in an open setting (think public bug trackers, source code available), because ease of change is less of a motivator for programmer who is just being paid to work on the product, as compared to an actual user of the product who would have to work around the problem any which ways.

---

That short feedback loops are good is a well known fact amongst engineers. The contribution of this post is to point out the link with antifragility, and to demonstrate that there is at least one way in which that programs could benefit from bugs/unintended-uses/unexpected-environments.
The answer is NO for jid, but jiq uses jq internally: https://github.com/fiatjaf/jiq
Perhaps this is natural? That is, you're looking for help so you're likely to have other flaws in your tool box.

Certainly, given the importance, something can be done to prevent relying on the human element to get this right every time. We're how many years into programming and SQL injection is still very real? So much for progress?
They've tried

http://money.cnn.com/2014/08/19/technology/innovationnation/...

https://www.insideretail.com.au/blog/2014/08/26/uber-deliver...

Seeing how those articles are from 2014 and we're not currently reading glowing reviews of direct-from-store Uber deliveries, my guess is that their unit economics didn't work out.
Am I the only one here who thinks that this post was written by somebody < 12 years old?

"matrix way"?

"insert chip and boom you get expert"??
> ... I was informed that I would be paying for the full price of the drive ...

This is pretty standard. Even at the corporate/enterprise level -- where the disk may contain sensitive data -- you have to send the drive back. You can pay extra (at the time of purchase) to have the option to not have to send your broken drive back.

I fully understand why they require the defective drive be returned, however. Their replacement policy would quickly be abused if they didn't require the customer to return the drive.
Well. One doesn't have to use boost ever. I'd assume that most C++ programmers out here don't use boost on a daily basis.

At the heart of the languages, in C you can only make additions and divisions, in C++ you can also make classes and use containers to store data.

These are very low level building blocks, it's not enough to make any meaningful development productively. You're forced to use 3rd party libraries if you want to achieve anything. (e.g. File, IO, Socket, Thread...)

There are many libraries/frameworks out there. I'd dare saying that C and C++ are extremely fragmented [by domains, platforms, tools...].

There is a minor subset of the desktop C++ developers that pick Boost as the default library choice and try to put that in all projects. They're just very vocal on StackOverflow [and all over the internet].
Yes but Uber would benefit from fleet pricing on purchasing and maintenance as well as the centralization of facilities (you could put the Uber fleet offices far away since the cars can drive themselves there for servicing).

Uber might have a compelling narrative here.
> I'd be annoyed if my mobile bandwidth was getting eaten up by a obvious problem.

When you view in a mobile context it does a download of much smaller videos and only once. It works differently for mobile and requires you to trigger playback.

> A simple problem with the website says something about the company, not the tech. It is a minor thing but perhaps means something.

So email them and maybe they'll fix it? Unless you'd rather continue using it as a yard stick of dubious value.

> I'd be inclined to give ML most of a break, but a tech company that has problems with its marketing side, especially when marketing something like ML is so crucial... what percentage of their initial customers is going to be people in tech? Gamers? Who do notice these sorts of details?

You're putting way too much stock into such trivial things. Unless you're specifically looking for an issue you're not going to find this. The amount of people who would find an issue like this are on the edge of edge cases.

You seem to have an axe to grind against the company.
I hadn't seen that. A lot of the stories about this state that they're going out of business.
The rep may be limited in what s/he can personally do and/or authorize, but I'm guessing it's not Dell policy that they a.) tell the customer that they are the manager and there's no one else, higher up, that they can talk to or b.) respond to legal threats with the equivalent of "come at me, bro".
> Perhaps this is natural? That is, you're looking for help so you're likely to have other flaws in your tool box.

Can you explain what you mean by that? The way I'm reading that you seem to imply "looking for help" means that they have issues all over.
What was so wrong about VB6? As a language I rather liked it.
64 bit ns timestamps are ok if you are only recording current events, but are completely insufficient as a general purpose timestamp.
The hope they will be able to shift that cost to car companies...

... but what would prevent car companies to deploy their own Uber-like network?

The cost of the software is low and the design has been proven.

Uber is the Lycos of transportation.
That's a sentence Ford would say ;)
Ask HN: How HN helps you?
I have been reading HN threads for ideas related to technologies and web apps for quite long .

I just want to know how it helps you.
California party fire: 'Ghost Ship' an illegal Bohemian residence
Yeah, agree on that. Some rental places don't mind delivering the car to you, e.g. https://www.hertz.com/rentacar/productservice/index.jsp?targ... and I vaguely remember some startup car rental place advertising just that.

Important to note that currently it's the Uber and Lyft drivers that are subsidizing the cost of getting the car to you - they are not getting paid for the miles driven. Whether or not this cost will be subsidized by Uber/Lyft in the future remains to be seen.
Guardians of the Galaxy 2 Trailer: Action, Humor, Classic Rock and More
Why would they get better deals than car companies themselves?
yeah, unless the snippet also includes a definition for variable $pcid, there is no proof that the code is actually vulnerable - using such simplistic logic, the stats are likely hugely inflated

but i don't agree that it should be the poster's responsibility to show their sanitation logic to prevent people from blindly copying-and-pasting their code, if it's not relevant to their question
As a regular user of SO, I'm often amazed at the number of SQL injection vulnerabilities in PHP questions, I had the feeling it was almost in all of them (turns out it's closer to 50% but indeed that's still huge in 2016!). And usually these questions aren't even about the blatant security issue but some minor unrelated problem.
Just by the way, the statement in the article is incorrect. Google Sydney does have male/female toilets, but we have unisex toilets as well.
See https://news.ycombinator.com/item?id=13099819
how practical is it to drop GMail for these guys? I'm tied fairly heavily to the Google ecosystem (Chome, Play, Finance, etc etc). They already have a mountain of data on me, but I really want to start taking encryption and privacy more seriously.
How do you dominate a market that is :

* with a very low entry cost since anyone car develop the same software that you do now that it's been tested and proven

* extremely highly regulated so you're highly dependent on government's good will

* live in a world where competition is a religion
You might have misinterpreted what I tried to say. I was talking about languages/frameworks, not the theory behind them. I don't think is feasible to go to a interview for a job that asks for node expertise saying you know the concepts behind node but you haven't used it yourself in a project.