skysight-inc/HackerNews huggingface dataset:
> I still maintain that the frequency of unsafe in a deptree is usually still small enough to be practically auditable

Not in binary libraries, hence why it is important to have a culture to only use unsafe if it really must be used.
France already has a large portion of the EU financial ecosystem. Large banks are constantly adjusting their staffing balance between their various countries, and Paris is high on the list of countries for them to hire in.

Source: an ex that is currently processing staffing numbers across EMEA for a major international investment bank.

Frankfurt is too small to subsume most of this business because of a difficulty getting staff that is willing to work there, and Amsterdam has a different focus. Likely they'll all get part of the pie, but that some of it goes to Paris is pretty much guaranteed.
Eh, just lab-grow meat directly instead of indirectly from animal production -- that would save water usage and greenhouse gas emissions.
> were trying to throw the election to Trump (rather than just to sow chaos).

It could be argued that both of those are the same.

I doubt they would be reckless enough to gamble on the former to be honest, when almost everybody thought HRC had it in the bag.
Trump and the Batman Effect
> don't run binaries you don't have some way of vetting

Thank you for your recommendations regarding operational security. We do really appreciate them.
>signalfd from another thread with its own independent stack.

This has similar reentrancy issues to signals.
Are all those "bankers" really necessary? The business London is losing can probably be done with far fewer people.
"A page-refresh blows away the entire DOM, and is just a bad design IMO."

Why? Really seriously question. Assuming everything is cached and it is not some super large app what's the problem with that?
Private companies like Crowdstrike would probably love to reveal their analysis however they would be restricted by the actual data owners (e.g. the DNC) and I would guess ongoing government investigations. Plus why blow all of your signatures when they still work?

Outside of that, there's tons of data online already regarding Russian government hacking activity:
http://researchcenter.paloaltonetworks.com/2016/06/unit42-ne...
https://www.fireeye.com/content/dam/fireeye-www/global/en/cu...
https://securelist.com/blog/research/72924/sofacy-apt-hits-h...
http://researchcenter.paloaltonetworks.com/2016/09/unit42-so...

Do you think understanding the tools, infrastructure, coding styles, activities, targets of these groups allows them to perform attribution?
Are there exceptions to this rule, i.e. legit uses for deauth mechanisms?

> Marriott admitted that the Wi-Fi users it blocked did not pose a security threat to the Marriott network.

> Similarly, Smart City submitted no evidence that the deauthentication was done in response to a specifically identified security threat.

It seems to me like it might still be okay to use WiFi deauth to automatically defend your network against security threats, such as foreign APs advertising the same SSID as your network?
Ask HN: How can I know what my market rate salary is?
Short of going out and getting a bunch of offers, how can I figure out if I'm being compensated appropriately? Since it's so taboo to talk about salary, I have essentially zero data points from friends/colleagues. I've tried Glassdoor and Paysa, but the former seems low and the latter seems high. How do you all figure out what you're worth?
To save a click, the live demo is at: https://reactube.com
SQL to query your OS
Out of the browser navigation facilities, the back button is the best understood feature. Users know how to use it, and what it should do.

Perhaps, where this goes is that Single Page Apps and web browsers aren't a good fit together?
That depends on what you want. Do you want more process, or less process? Do you prefer strong leadership, or consensus decision making? Etc.
I think scrollaway is here to troll. No need to reply to him seriously. You may reply to him in a humorous manner or just scroll away from his comments, just like his nick recommends us to do.
> while ignoring the wide spread corruption in their party

Because the crime of breaking in is far more disturbing than what was found, given that even the "victim" brushed it off? If you ask people what the worst part of the emails was, they point to out-of-context blurbs that are either common practices or misleading.

I have legitimate cause for concern when the President to be inaugurated does not believe intelligence about an American adversary.
Autonomous Smartdesk show at CES 2017
Been at this battle for a few years. Check out https://nymrights.org/ (and https://nymrights.org/nymrights-info-flyer/ for the info flyer)
China Needs a Nuclear Option
Personally i just take what they offer, try to counter offer +20% and then settle for anything they feel comfortable with. Later i can still argue beeing worth more if i want.

That assuming you choose a job because you want to work there and not because of the money.

To clearify: Making out a standard is hard because the jobs are so different. You can expect to get paid more when you do project management as well for example. And less if your job gives you all the time in the world to research and learn.
So one can patent the resistance levels? From the USPO site

> any person who “invents or discovers any new and useful process, machine, manufacture, or composition of matter, or any new and useful improvement thereof, may obtain a patent,”

https://www.uspto.gov/patents-getting-started/general-inform...

I wonder how that specific resistance level meets those requirements when basically any other nearby level would do. It's like patenting spaghettis of a given length or pizzas of a given size.
In 2016, yes.

All the way through the 80's up to the early 90's, C toolchains only mattered to those that were working on UNIX workstations and servers. On home computers it was just, yet another language, with compilers generating slower code than junior Assembly programmers.

So of course Rust has to catch up a few decades of market use.
Ah, I didn't know this convention. Thank you for telling me.
simply depends on how you measure/see 'best'. In some ways my tiny company is 'the best' simply because how the 3 of us design and define it. Want a different process, suggest it. Want a useful tool, build it. In some ways the 'best culture' is the one in which you follow all the rules, build foundational code, limit your hours and contribute back to open source frequently while at a giant company whose existence seems a certainty. The experiences are so varied situationally, compensationally, etc. I'm starting to think on a remote island as a nomad freelancing and/or working on your own projects. You live in a beautiful place, its often affordable, interesting cultures, etc.
This wouldn't be an issue if WiFi APs enabled IEEE 802.11w-2009 protected management frames by default. Most consumer routers have supported this for years, but have it disabled by default.

Android's built-in hotspot functionality still doesn't support this at all, and hotspots are the main thing here being targeted by hotels. If you want to see this fixed in Android, consider starring this issue: https://code.google.com/p/android/issues/detail?id=197440
"Bill" is used as the pseudonym for the teenager that caused his car accident back in 2006. So, the teenager's insurance was covering medical expenses up to $20K only.
Heh, actually that is a good question, since answer will also tell you a lot about culture. It is an indirect question about working hours too. E.g.:

1. We do hackathon once a quarter during work hours.

2. We do 24h hackathons, but it's really fun!

3. Well we work so long that we don't have time for hackathon.

4. We care so much about work-life balance, that we don't do hackathons.

Depending on what you are looking for, you may be satisfied with different answer.
In addition to that, I think those should be mentioned:

- Software Defined Networking. We are starting to see LuaJIT in particular being used to write very high performance network code in userspace (e.g. Snabb).

- IoT. Lua has always had a niche as an embedded language, especially on weird small hardware platforms. It is known for being extremely easy to port and using few resources. It is what you reach for when you want slightly more than what a Forth gives you. See for instance the first Tessel, NodeMCU, the Sevenhugs SDK...
Annex K was required in C99 and made optional in C11, it tells everything on how C vendors see safety.

Also it is actually a joke, since it still separates the pointers and length in two separate variables, instead of using some kind of struct.

The only thing it does is have functions with better semantics on the terminating nulls.
I don't think the current model of agricultural production in California is sustainable; for something that takes up 70-80% of the state's water, it only amounts to 2-2.5% of the GDP.

If the problem for California is one of policy, what endeavors can technology take on to help?
And maybe even Brussels. At the very least least it has better chances then Paris.
Note that this is for diesel trains. While likely most of the length of the track won’t be electrified soon, essentially all tracks in western Europe (France, Germany, possibly Poland) are already electrified. This means that using nuclear or renewable energy generation, the trains can run emission-free there, in particular avoiding the strongly localised particle emissions by ships in and around harbours.
Bot traffic is accounted for in the price advertisers pay for ads. Advertisers don't run unprofitable ads.
Not a user benefit (or methodologically sound).
Sure, it really depends on the speed of the simulation relative to their own, and the level of resources poured into this (is it a high school project, or the combined output of their entire civilization? what do they look for inside, if anything?), and of course, their actual objectives.

Honestly, who wants to talk to some snot-nosed humans? They probably don't bother checking until the universe becomes one giant superorganism anyways. And even then maybe they just make their observations and ignore it as it tries to wave them down.
I'm not convinced that introducing the limitations of native apps to a non-native platform is a benefit, or a feature that makes the non-native platform more competitive.
Well done.

By the way, I have problem when opening that site. The site has problem with SSL certificate on Mozilla Firefox.
Automatically Controlling a Dehumidifier with a Nest
A comment I made within this post: Fitting a formula to data implies that there are reasons for the formula to be this and not something else.
For example one can prove, within the current model, that the speed of a falling object is v(t) = 1/2 g t^2 and it is reasonable to fit experimental data to this formula to determine g. It may be a false assumption (it is, actually) and this is the whole idea of modelling and understanding limitations of a model.

In contrast, the article assumes that a linear expression will be fitted to any kind of data as if they behaved, by miracle, in a linear fashion. Any kind of deduction from this will be false, except if, again by miracle, the data actually behaves linearly.

I am a big fan of clusterisation and data behaviour discovery - the process which highlights relationship between data we do not know anything about. I believe this is a huge win in ML.
Fitting something (1D, 2D, ...) to data without a model and drawing conclusions is at least perilous.
Less than that even:

all 37641 (100.00%) in 135 files
c 37311 (99.12%) in 66 files
asm 232 (0.62%) in 1 files
makefile 98 (0.26%) in 2 files
I thought all domain names with the word "sex" in them were already taken.
Do yourself a favor and take the time to read this paper not just to learn about P=?NP but also to see a model of how technical writing ought to be done. Scott Aaronson is truly the Richard Feynman of our day. Not only is he freaking brilliant, but his writing style is accessible, not too mathy, even humorous at times. This made me LOL:

"We see a similar “invisible fence” phenomenon in Leslie Valiant’s program of “accidental algorithms” [246]. The latter are polynomial-time algorithms, often for planar graph problems, that exist for certain parameter values but not for others, for reasons that are utterly opaque if one doesn’t understand the strange cancellations that the algorithms exploit. A prototypical result is the following:

[Abstruse theorem elided, but it boils down to: there's this weird problem with a parameter k that can be proven to have polynomial-time solutions for some values of k and proven to be NP-hard for other values of k.]

Needless to say (because otherwise you would’ve heard!), in not one of these examples have the “P region” and the “NP-complete region” of parameter space been discovered to overlap."
Doesn't limescale eventually kill drip irrigation system?
Sorry, come again, what part of the election did 'Russia' hack again? I thought it was a private organization.
Same here, so much to learn from if your whole world consisted of the JVM. But I don't think I want to do it professionally.
That has zero relevance to the current situation.
I'm guessing he means readability. Google fetisihizes consistency, even at the cost of ingenuity and productivity. Heroism is a virtue at some other companies; at Google, it's a sin.
> Not sure what you're implying

London bankers' skills are unlikely to efficiently translate to Paris. Moreover, Paris can support less financial activity for having a bank-based economy--banks can't process at the throughputs markets can.

> I fail to see your pattern

The paper considers more than ten European countries. I included the postscript because I found it interesting, not because it's particularly germane to the article topic.
> Assuming that the equity packages of both companies is $0 throws away useful information.

Well, no one said that all the $0 equity is valued at the same zero. There's nothing wrong with comparing those zeroes, but that's not the mistake most people make. Too many people use one of those zeroes to offset something that is nonzero (cash compensation differences, public company equity, quality of working environment and so on). Encouraging people to "value it at $0" is about making sure that they don't make that mistake.
France has a large percentage of EU bankers already.

Hilarious. Did you know that London is the 7th largest French city? Those people are not here for the weather. And Frexit is not off the cards either.
> They are only hesitating between Amsterdam and Frankfurt

At least in private equity and the related leveraged loan, structured product and similar work, New York is taking the lion's share of formerly British bankers' business.
> I think the usability of spatial controllers is pretty tightly linked to use of a VR viewer

I see what you're getting at, but remember that the first wildly successful spatial controller was released over 10 years ago: the Wiimote.
Yep, we have this status, it's called "Cadre" in France, and you don't even have to be a manager, you just need to have a certain autonomy on your work, which basically apply to everyone that work in an office.
Since it's so taboo to talk about salary..

That's only really true within a company, and even then it's only bad to ask for a specific number. People are often willing to share a ball park number (eg between 32k and 38k).

That said though, I'd question the wisdom of using the market rate as a basis of an opinion of your self-worth. Figure out what you want to earn and negotiate with potential employers to get that. It's very likely to be more than the market rate, but if you're good you can get it.
In the situation the parent described, I find it hard to construe it as benefiting the company over the individual (other than naturally making the company more attractive to work for).

We did this when I was at Guidewire and it was amazing. I explored Event Sourcing during a hackathon and eventually went on to build it into a product using those skills - it's a really happy memory. In another hackathon I built easter eggs into our internal seating chart application - the vibe of everyone hacking together was great.

This was a hackathon where it was broad enough that "reading an interesting programming book" counted, and nobody really bothered you if you did something completely different.
Here's a fun related issue: A common Linux mutex-implementation strategy to deal with this issue (waker-waiter races) is by releasing a mutex before futex-waking any threads blocked on it. Since the waker doesn't know for sure if a waiter is present at the time of waking, the locking thread may fail its futex-wait attempt, acquire the mutex, and destroy it, freeing the mutex's memory back to the allocator. In the end the waker issues a wakeup call to an address no longer occupied by a mutex.

As a result, the mutex implementation might spray futex-wake calls into arbitrary addresses not owned by the implementation. This means that other libraries in the same process can't rely on accurate wakeups, even if it would otherwise be algorithmically correct to do so (unless it has some way of guaranteeing that its synchronization locations never share an address with other libraries).

If you've ever wondered why pthreads-style condition variables allow spurious wakeups, this is one reasonable situation in which they can occur.
First, as Americans seem so easily to forget, other countries actually have their own governments. Why should the US government try to enforce US labor laws inside the borders of other countries?

Second, trade agreements exist and are a more effective way to do what you want.

Third, it is impossible to tell how a product was made by looking at it. How would you enforce a law that makes a product illegal based on something invisible?
Except that it's still totally possible to make a big difference working at Facebook, Google, Amazon, Microsoft, etc, if you choose the right team. And it's entirely possible to be marginalized or sidelined at a late-stage startup. The two concerns, to me, are almost orthogonal.
Later i can still argue beeing worth more if i want.

It's a lot easier to get an additional 10k on your starting salary than a 10k raise.
Because before C got widespread beyond UNIX, we had lots of options that are now gone, so the millennials only know Rust as having those features.

Of course we also can talk about D, Go, Swift, .NET Native, Haskell, OCaml as possible modern languages to use instead of C.

Hint, many uses of C actually only care about AOT compilation to native code, and never have spent even 1 second measuring performance.
Replique Montre Roger Dubuis Excalibur Chronographe EX45–78–90–00–09R0 La Revue
Hi,

I'm a self-taught web developer and I quit my job in business consultancy and hustled for 11 months before getting my first junior web developer job.

From my experience and numerous talks with other self-taught web devs I would suggest the following:
- to start with the "why" and then with the "what" and the "how". What I'm trying to say is that you should start to learn to some extent how the internet works (DNS, http protocols, client/server cycle).
- after that you can start with the HTML, CSS and Javascript and learn the plain languages and then the frameworks. I say that because frameworks come and go, but the language from which they stem remain pretty much the same.

If you want to chat more about this topic you can email me at alin.rauta@thebusinessclub.ro

I wish you the best in your endeavour!
Alin R.
Not to mention that (IIRC) Spacemacs involves installing evil-mode, which makes Emacs interactions similar to Vim interactions.

Taking that into account, this can be interpreted as "It makes Vim work more like Vim."
There's no population bomb? http://blog.dssresearch.com/?p=229
> Moves are runtime moves, so you can still attempt to access the value at compile time.

What do you mean by that ? Are you saying the standard decided to make it non-destructive moves ? Then yes, it is a possible scenario for error but also a performance advantage in some cases.
Divvit | Senior NodeJS Developer | Sweden | REMOTE http://divvit.com

We are a small startup aiming to make a difference in Ecommerce Analytics. Our goal is to provide e-commerce owners all information they need for their businesses to succeed. We are a fully remote company.

We are looking for experienced NodeJS developer who knows and loves Javascript.

Our stack includes Docker, NodeJS, MongoDB, ElasticSearch, React/Redux.

You need to be familiar or be interested in at least some of these:

* Building and working with RESTful API's
* Working with huge amount of data
* Clojure
* MongoDB
* ElasticSearch

Your Key Responsibilities would be:

* Architecting and implementing new backend features
* Rewriting legacy code (Specifically we want to get rid of Loopback framework)
* Developing Clojure app

If you're interested drop me a line at andrei@divvit.com.
Paris has plenty of trading desks. The physical location of the trading desks relative to the markets matters little.
Not sure if i can agree with that. Companies i worked for usually had a very certain plan how much they want to pay new people. And if they are doing really well a 10k raise is not exactly rare.

Might be easier in Switzerland than in other markets tho
Etcher: burn images to SD cards and USB drives, safe and easy
>It is a little more complex than calories in and calories out. It isnt kooky to suggest that some foods (liquid sugar) are absorbed more readily while other calories may pass through without absorbtion (plant fibers)

No, but it is kooky to suggest it as a standalone diet, complete with various invalid assumptions, outside of scientific dietary consensus.

Plus, you'd be surprised how far the "calories in/out" goes:
http://www.fitmole.org/twinkie-diet/
Me too, but although the community is great, lack of focus on how to go forward in memory management, runtime and deprecated packages, seems to keep hurting the language's appeal.
First result in a sequence of promises in JavaScript
Project Data, 0.3 released
I agree with your most of your comment.

* Scalable architecture is, most of the time, a very-NOT-big-deal. Bots tend to be relatively lightweight apps, sending/receiving json data only. Even websocket Slack apps can now be replaced by HTTP API.

* Discovery is really un-solved at this time, especially by Facebook. Slack does a better job, but arguably has a smaller ecosystem of B2B bots to manage and promote.

However, I think the article is about a rather ambitious (more than usual) and interesting bot. Having to parse normal language symptoms into medical terms is 1) an interesting use case 2) hard to do well technically. So maybe they face challenges most bot dev don't face.

Design-wise, most people don't see how hard it is to design chatbot flows that hard not horrible and confusing. Most chatbots are horrible and confusing at the moment, because coding bots is easy, designing them is really hard.

I think the article make interesting points about their own specific case, but their situation is perhaps less general than they seem to think.
Big 4 in this context is Accenture, PwC, Deloitte and KPMG.
Thing is, if I had to guess, I would say Facebook doesn't attempt to make you use your real name to make the community better in the first place. That's almost certainly just its pretext for everyone who's willing to fall for it. Most likely, it does that to make sure it can identify you globally and uniquely for commercial/advertising purposes. Think about how much more valuable your online identity is if you go solely by Jon Doe rather than by foolover123, bar456fudger, and nighthowler789?
It takes all kinds. Some people like doing as they're told.
I agree. I've produced x^8 algorithms, which are already completely useless for all practical applications.

If a proof has 10,000 statements, we already couldnt generate it with an x^8 algorithm.
Ah, probably. The conversation I had was regarding where they'd go in Europe