skysight-inc/HackerNews huggingface dataset:
2017 is projected to be the first year ad spend on digital ($US77BN) is greater than ad spend on television ($US72BN). 2015 was $60BN digital vs $69BN TV.

https://www.emarketer.com/Article/Digital-Ad-Spending-Surpas...

> The bottom of the barrel inventory is likely not going to rise with the change of the tide

Agreed.
There are crap players in adtech.
There are crap ads and crap tech.
There are shady advertisers, publishers, creatives.
There are good players and opportunities in each of those.

We're working to get DFP to filter out creatives that are too fat or complicated. That's not yet simple.

The "thoughtful inventory curation" noted in the article is not yet simple. Helping people combine stories, ads, and readers who care about both needs work. And there is money to be made.

> Publishers need more leverage to fight for user experience against advertisers' demands, and users need to understand the value exchange that occurs when they get targeted apple adaptor ads while they read articles about the latest iPhone.

Good advertisers, marketers, publishers want good UX because users leave without it.

> when publishers, advertisers, and users are able to come back into equilibrium

Indeed
7 ways to improve team collaboration with video chats
> Can anybody make a strong case to me as to why are buffer overflows considered an issue in C when it takes like 10 minutes to write and test an array implementation that prevents that from ever happening?

That it's not a by-default and forced language-feature and that most developer aren't going to spend those 10 minutes when they need an array.

They'll just use the language-provided array-implementation instead. Which in C is very, very unsafe.
Agreed and if your doing any typing at a desk for extended periods (> 1hour a day) you should really be using a separate keyboard.
"M.C. Dean charged $795 to $1,095 for access to the Wi-Fi it provided"

That's so outrageous.
Does use of this [1] information not include attempting to match up the user's real-life name with his/her Facebook name?

[1] https://www.facebook.com/help/494750870625830
Waiting for the EXPORTING screen box for ages & decided to terminate.

2ndly yeah what so great of having an image with equalizer bar moving..

Did i miss anything ?!
I wrote about this before as well, from a technical point of view:

http://magarshak.com/blog/?p=114
afaik it does not work like that. same as u cannot agree that i can kill you.

the agency regulates the spectrum, and nobody else, the spectrum is not my or from the hotel, so i cannot agree that they can block it or not.
Interestingly, "email news" were eventually just dismissed by everybody on account of the regular news networks not using email for broadcast: "If this email were true, I would have already heard of it in the TV/radio news."

But that signal isn't there anymore: the serious news networks publish on Facebook now, and all the bullshitters do too. There's no broadcast license costs, or paper publishing costs, to filter them out.
FULL STACK DEVELOPER WITH STRONG SKILLS IN CONVERSION/USABILITY TESTING AND OPTIMIZING AND ONLINE MARKETING

Location: Graz, Austria

Remote: YES

Willing to relocate: NO

Technologies: JavaScript, HTML, CSS, React, PHP, Node.js, MongoDB, RethinkDB, Redis, MySQL, Conversion/Usability Testing and Optimization, etc.

Résumé/CV: https://github.com/tiefenb/ll/blob/master/lebenslauf.md

Email: markus DOT tiefenbacher AT gmail DOT com
Google python coding style looks like java...
I can't help but be reminded of the factoid that in 1898 international planning conferences were flummoxed on how on earth to deal with the ever-increasing problem of the amount of horse manure in cities... by 1912, not so much.

Now solar is cheap, coal seems incredibly unwieldy. Not just the poles and wires, but the mine, the railway to take the coal from the mine to the plant...

We are now a year or two past an inflection point -- building new coal plants at this time would seem like a much riskier investment. And that means the rate of construction is going to drop way below the rate of retirement pretty fast & pretty soon.

And because solar has high variability, it's going to get overbuilt (nobody wants their battery to go flat much, so it'll spend most of it's time full). ie, there is going to be a bunch of "spare power" lurking around that is effectively free.

And since a lot of problems can get turned into energy problems, that's a pretty happy place to be.

Rash prediction:

The Gold Coast currently has a mothballed desalination plant, and a water line from it to the South-East Queensland dams (built during the "Millenium drought"). I would not be surprised if within 30 years, it is running full-time, and pumping inland, even if the town-water dams are full -- because the marginal cost of running it instead of not-running it is zero, and with a bit more engineering the spill-over can be redirected to top up the Murray-Darling's flow. It'd require about 69kms of additional pipe, to connect Wivenhoe Dam to Cooby Dam. (Cooby Dam is in Toowoomba, which also has a bore into the Great Artesian Basin, so at that point you're inland enough to pump back into the basin. Draws from the basin have been blamed for the reduction in flows of springs that feed the Murray-Darling system...)

The quantities of water down a pipe might be small, in river terms, but if the marginal cost of power during periods of excess is zero, and seawater is free, then it might start to seem odd not just to leave it turned on whenever there's spare load...
> What do you mean by that ? Are you saying the standard decided to make it non-destructive moves ?

You can still access a value after it has been moved out. use-after-move is allowed by the compiler. It places (stdlib) types in an unspecified but valid state (I've seen C++ code reusing these types and assuming that the state after move is something in particular -- it's not).

Most optimizations you can do by reusing a moved value could be done automatically by the compiler (by using the same stack space since it statically knows that it's been moved out).

Linear types are a pretty well known pattern and could have been used as a part of the design of moves. This would have the additional benefit of removing explicit move constructors from 99% of all types out there. This has not been done (and can't be now).

Edit: The pretty rare optimization potential of runtime moves is pretty much negated by the fact that common things like reallocing a vector can't be made into a memcpy for most types, just because they have nontrivial move ctors which wouldn't exist in the compile-time move scenario.
Yep, air freight is generally by weight, shipping by volume. Electronics are already sent via air, saving $3 shipping on a $1500 item doesn't make much sense. Taking the UK as an example, 70% of non-EU exports by value go via Heathrow. Would expect the value to be similar for China. By volume it's probably low single digits for airfreight, by value likely >50%.

Low value items and very heavy items are currently not viable via airfreight, that's probably where trains can be profitable. If you produce clothes your only options are to either do so in Europe (there's a lot of production in Turkey) and have it close by, or produce in Asia and wait 40 days for every order. Cutting that time for a premium could make a lot of economic sense.
I think the theory of those who believe he was trying to do the right thing is that he foresaw a situation where if he didn't act, the result would be roughly equivalent to a much worse violation of said norm - and so he chose to preserve as much of the spirit of the norm as he could at the expense of participating in the violation of the letter.

Whether this theory seems correct, and whether it argues for principled or unprincipled, I suspect will have varying answers depending on who you ask.
Real names are the difference between Facebook and MySpace. I'm not friends on FB with anybody I haven't met in real life.
Sounds like you're overthinking it.

The standard answer you'll get from any of the thousands of people doing what you're considering doing is "what, I need a visa for this?"

Nobody cares that you're working from your laptop without the correct visa. It's so vanishingly rare that anybody gets in trouble doing so that you'll find the one and only example in the archives here if you search (because it was so bizarre as to be news-worthy). Go back to that same internet cafe in Chiang Mai today and you'll be fine though.

Just go as a tourist, and don't overstay.

And have fun!
Yes, but that is no secret, so how is it a skeleton?
Cheaper marketing automation for normal people
It's a bit like Intercom and Autopilot but really really cheap - like two times cheaper. It is not as nice, polished and shining as the two mentioned but has even more functions. What do you think about a such idea?
https://userengage.io
Being able to claim that you've been to every single state is a great reason to go there!
Broadly, eastside -- Redmond, Kirkland, Bellevue, etc., but also looking at Snohomish County. I nominally live in Redmond now. I don't like Seattle proper, but do like the Seattle area.

(What I'm really looking for is a 5-10 acre property in King or Snohomish County which has gigabit Internet, is not in a city with restrictive building codes, permits shooting (hard in King County), ideally borders a hill or non-buildable land on one or more sides, is on a decent road, ideally isn't too far from SEA or downtown Bellevue and Kirkland, maybe is zoned Ag (I'd be happy to do hobby farm ops on site), and is "affordable". That's possibly overdetermined, though.)
It's simply not true that "the intelligence community will never be able to release enough information to satisfy people".

A few days back, the same author wrote[0]:

> On the other hand, if they've got web server logs from multiple victims where commands from those IP addresses went to this specific web shell, then the attribution would be strong that all these attacks are by the same actor.

All the FBI/DHS have to do is say: Organizations A, B, and C all have server logs showing this IP address deliver the same malware.

That would be enough information to attribute the hacks to the same actor. If the FBI/DHS were lying about Organization B, then Organization B would speak up about it.

The author of this post is right to point out that the attribution given so far is not only incomplete, but is borderline bizarre.

[0] http://blog.erratasec.com/2016/12/some-notes-on-iocs.html
Sounds typical for what I have seen at Tradeshows.
Βοηθάει Το Σεξ Στις Αθλητικές Επιδόσεις Πριν Τους Αγώνες; – Sex Escort News
A post by ESR was even flagged off HN because its message was that he expected evidence to back claims of harassment

There's at least one other reason users may have flagged it, and in line with the site guidelines: it doesn't sufficiently satisfy intellectual curiosity, and at the same time has a high likelihood of producing little to no constructive discussion while also being very susceptible to flamewars. That doesn't mean that the topic shouldn't be discussed, just that it's unlikely to be constructively and civilly discussed on HN.
That's true, but I'm thinking of situations where there is no context other than pure abuse. I wonder if Charlotte Dawson would have taken her own life if she found out that the majority of trolls telling her to kill herself were kids living in their parents basement.

https://en.wikipedia.org/wiki/Charlotte_Dawson
It's not exactly the same, and http injection by ISP's is definitely a thing.

https://www.djm.org.uk/posts/protect-yourself-from-non-obvio...
What do you mean? Variable-length arrays are OK in C.
Nice product! This kind of waterproof notebooks are also used for technical scuba diving: http://eshop.daretodive.eu/produkt/wetnotes-complete-black-/
>>> Using a configuration bundle makes the learning curve less steep but more tall, essentially.

Beautiful quote which I'll definitely use more often :)
Building it on Arch Linux failed because npm run release expects dpkg-deb to be available.
I Know What You Download
That sounds like some Garrett Hardin argument -- privatization will not solve the water shortage issue. It would simply allow large industrial farms, which typically pollute local water sources through fertilization runoff, to buy up the water supply under an auction based system. What the government needs to do is adopt policies that enforce water conservation and remove obsolete laws, such as one that promotes farms to use up the amount of water allotted to them to receive the same share next season.
I've always maintained that python is perl for bureaucrats, so that makes total sense :)
That just shifts the cost around, since there's no reason for airlines to cooperate with such a search engine.
Euro Truck Simulator 2 Activation Key and Crack Free Get Here
12 Reasons Why Google AMP Will Increase Business Profit
Considering that SQL describes the result and not how to get it (that's for the query planner, that is the SQL compiler), maybe it would look like Prolog. More about this at http://stackoverflow.com/questions/2117651/comparing-sql-and...

A SQL like language in JavaScript is Mongo shell, which is much more complex that SQL. Every time I use it I wish they adapted SQL to Mongo instead of writing their own thing. I usually end up writing complex queries in Ruby with Mongoid. They're more compact and easier to understand.

About ActiveRecord/AREL vs SQL, they're more or less the same. Sometimes a query is easier to understand in Ruby, sometimes in SQL. Complex queries are much easier to read in SQL or outright impossible to code in Ruby.

If I could change something about SQL I'd change all the arbitrary weirdnesses of the data definition language and the non orthogonal stuff, like HAVING which is a WHERE in a different context (aggregations vs rows).
Regexes support whitespace and comments, and can easily be composed. But I agree that an effort needs to be made to write legible Perl code. "Perl Best Practices" is required reading for any professional Perl programmer.
You sound quite young and naive. How old are you? :)
> I work on a C codebase that does this […]. Yes, there is quite a lot of NIH. With essentially-uniform use of checked data structures, and an extremely comprehensive suite of automated tests getting run under ASAN (originally Valgrind) […]. This is a complex, >1M SLOC distributed system that has seen several years of production use at this point […].

>

> […] it just needs to be done from the start, and then you just need a bit of discipline to keep it up.

Here's a neat idea: wouldn't it be cool and save a lot of time if the compiler did this for you automatically, from the start?

Of course, you say it's easy to do it manually, but something tells you your company might have needed to pay less for development if the compiler did it automatically with no human intervention required.
Without cross-company exposure it's hard to answer this question, but for me, Netflix is very good at projecting good engineering culture. The fact that they build engineering tools that work in general contexts, that they write blog posts describing them, and that they open source these tools impresses me. When I read their blog posts, I see a company that's effectively solved a particular problem in a very general way that works well in specific cases too. I love it.

The degree to which Twitter open-sources its work is another thing that I like.
CrowdStrike's partisanship is like the news media's: bias towards spectacle, unwarranted certainty, and producing a coherent narrative facts be damned.
> Think about how much more valuable your online identity is if you go solely by Jon Doe rather than by foolover123, bar456fudger, and nighthowler789?

Not very. Assuming the demographic infomation is still accurate, that's the part they can sell.
Ask HN: Masters degree GPA and job
I know similar question has been asked many times. But I wanted some opinion on this topic. I have 4 years of work experience working with companies like Cisco, Oracle. I decided to go to grad school in 2016 fall. Now I am done with one semester and my GPA is 3.33 :(.

I already have an Internship from Cisco for summer. I am worried how much my GPA could hurt me for full time job. I have a decent open source profile, where I have contributed to Eclipse Project. Some personal projects in GitHub with more than 10 stars or forks. I also have ~12k reputation in Stackoverflow. Would recruiters see my GPA as big negative?

PS: I have BS in Computer Science with 3.5 GPA
I really don't want to say this but, the real names policy does help in terms of trolling behavior for certain communities. When TechCrunch switched over from Disqus to Facebook comments, the amount of trash and trolling was immediately reduced and stayed at a minimum permanently. A lot of the media outlets (Motherboard, Vice, NPR) who've disabled commenting altogether were using Disqus. I've noticed media outlets that use Facebook comments seem to still have commenting turned on.

I know anonymity in comment systems is as touchy a subject for internet freedom lovers as gun rights are for people in high crime neighborhoods. Those that hate them have already made up their mind and won't look at contradicting evidence, those that love them have already made up their mind and won't look at contradicting evidence. The truth seems to lies somewhere in the middle.

So "Real Names Policy" definitely has it's place. Maybe not everywhere, but definitely in some communities.
It sounds like a great place to work at. Kinda sucks that, they only interview new grads from top schools unlike the other Big 4.
What makes you think that they were kids? I highly doubt that.
From an European point of view, the mobile world was set back a decade (if not more) by the tech media's fawning over Apple and Google's entry. This in large part because they built products for the US market, and it was lagging the rest of the world massively.
If you really want to see the affect of the drought, visit the Hispanic and or local farmers.
Show HN: Gravitate – Project Scaffolding for Grav CMS
The Beginner's Guide to Blog Photos and Imagery
There was a good article on pro publica [0] (who I trust very much) about facebook's use of offline data source, and that presumably needs to be linked by real name

[0] https://www.propublica.org/article/facebook-doesnt-tell-user...
Why is Frankfurt not attractive to potential employees?
The FCC isn't saying you can't use active measures to prevent a rogue AP from attacking users who intend to communicate with you. That's why they asked MC Dean to explain exactly how their interference helped secure its own network.

What they're saying is that you can't actively interfere with parties who want to use unlicensed spectrum to communicate with each other, even if they are physically on your property, and the fact that you must share bandwidth with them is not a valid excuse to do so.
Developer’s deceptability test
Take Me to Your Leader: Online Optimization of Distributed Storage Configs [pdf]
I guess Apple's approach makes sense if one expect someone to want to listen to music while also using the mic to talk to someone. Otherwise the advent of a conversation will preclude the use of the music, and thus any need to use the controls.
Well, you can still sort of view it that way. You can imagine the bounds check being a "compile time generation of the C code you'd write to check the bounds anyway".
I think he's saying between the lines that his source is a insider, and it's either a leak or an internal hack. That's the only way he could have any reliable information at all about the source.
False. It's relatively easy for SPAs to handle the back button gracefully, you can change the URL to indicate the state of the app and add it to the browser history, listen for url change events to then change the state, etc. Grooveshark handled them just fine, you could even copy/paste a song, artist, album, playlist, etc url directly into url bar for the already open app and it would open the appropriate page without doing a refresh and interrupting your playback experience.
However, even if the back button were as terrible as you say for SPAs, that would be a mark against SPAs not browsers or the back button, which is of great utility, which is why those pesky users insist on pressing it.
Round-trip 4 weeks is OK; it will be interesting to see the packet loss rate in this service.

The roads around here (Helsinki, Finland) used to be congested by trailer trucks transporting new Japanese cars from the harbour in Hanko across border to St. Petersburg.

Bothered by the flow of trucks, I asked why didn't they send the cars across from Japan over Trans-Siberian railway? I was told that too many cars disappeared on the way. In fact, sometimes a whole train disappeared.

Now Russia has built a suitable harbour of its own closer to St. Petersburg so that the flow of new cars doesn't need to come to the ringroads of Helsinki (and, I expect, the economic situation means fewer cars are sold there).
The more i learn about USB-C the more i feel that something went badly wrong during its development...
Because it's expensive, has public stigma, and some places like California are located near faults.
I agree that having to remember is a problem, it's one of the many shortcomings of C that it doesn't let you differentiate between types at compile time.

Pointing into subsections works fine. You just have to create a type for it. This solution doesn't have the same problems as strings because you don't rely on a terminating entry, and it's what languages like Rust or Java do as well.

You can allocate dynamic arrays on the stack in C just fine with alloca(). The only performance cost is when checking bounds, but since it's a dynamic array, it's the same cost you'd pay in Rust.
I know of the attack. It's very unlikely to matter in practice.

There's a ton of potential issues when you're curl-piping; all those issues are present in some form when you're simply doing curl first then sh.

It's far more egregious to download a hard-to-inspect binary then run it, than it is to download a shell script then run it. Although it's harder to inject code on the fly, if you're at the stage where you're worried about these kinds of attacks it makes very little difference.

I don't see people bitching about https://www.terraform.io/ offering download links for example. So yeah, it gets tiresome to always see "oh! curl|sh! boo! bad!" - there's actually no better way of sharing such scripts short of making and vetting a package with a high-entry-bar distribution. And a two-step curl + sh instead of a pipe is security theater.

https would certainly be appreciated on that site but that's a general issue, regardless of the download script.