skysight-inc/HackerNews huggingface dataset:
Seattle Food Jobs Soar After $11 Minimum Wage Starts

http://www.forbes.com/sites/eriksherman/2016/01/08/seattle-f...
This article seems like it's somewhat lacking focus. If anything, it's a brief foray into history of monopolistic wars that are the anti-thesis of trade agreements. What, indeed can Nutmeg tell us about, NAFTA though? Not much.
Rather than looking for a new language, why not ban programs from writing to executable memory?
Taube's carbohydrates/insulin hypothesis isn't looking so great, after NuSI (he helped found the org) released their metabolic chamber findings...
http://wholehealthsource.blogspot.com/2016/07/nusi-funded-st...
You are equating the unsafe keyword in Rust with entire C codebase.

Yes, carelessness in either could amount to trouble. No, they are not close to the same amount of risk because the relative amount of code in each is orders of magnitude different, and unsafe blocks can be heavily reviewed.
With C++, the default is zero overhead, not safety.
> We’re optimistic we will beat climate change. But, at the same time, we need to prepare for things to get worse.

No, we need to act urgently to stop climate change; saying only "We're optimistic" sends the message that it's not a critical problem that needs urgent attention.
Long haul flight. Not practical to bring all meals. Buy food or starve. Principle of supply and demand. Lots of demand and one supplier. Low margins on flight and push for corporate profits so supplier needs to rake it in => Food aint gonna be cheap!

If you don't believe me buy a sandwich on a ryanair flight.
I would start by getting the code to compile with g++, then begin migrating the dangerous C constructs to safe C++ constructs. IMO, that would be a safe, reasonable thing to do.
> Do you understand now how it's possible create a safe abstractions in an unsafe language?

Who cares? What's "possible" is completely besides the point. What matters what is done. And so, yes, you can create safe abstractions in C. But if you need to interoperate with someone else's C code, you have to deal with how your abstractions interact with someone else's, or someone else's lack of them. The point of using a language like Rust or Go or... pretty much any non-C language with lots of traction is that you don't have to provide "your own thin abstractions." You use the same one as everyone else. The point of Rust or Go isn't to make things easier on you. It's to protect you from every other piece of code you interact with. The standard library. Libraries written in the language. Other people working on the same project as you. Yourself five weeks ago. You all use the SAME safe abstraction. Nobody has to roll their own. There aren't 25 safe abstractions for 20 people working on the project. You don't have to reason out or guess whether or not some library (or even the standard library) is doing the right thing to avoid buffer overrun. You don't need to defend your entire codebase against someone else's code not doing the right thing.
That's an extreme perspective. I've made extensive use of signals in programs that have shipped to hundreds of millions of users. If you're careful, they work fine. Yes, POSIX needs something like NT's vectored exception handlers that could allow multiple users of the same signal to cooperate: but that's an API problem, not something inherently "unfixable" about a program being interrupted and temporarily doing something else for a bit.
Visual Basic, for financial analysis. Though not sure VB 14 qualifies as "old").
Yes indeed it is difficult when officials "tell" you something untrue, like two news releases that are very clearly about the same general topic but are not explicitly associated. In other words, it appears the 3 letter agencies were trying to imply something here, but not state it outright. It used to be (I think?) the job of the media to shine a light on government propaganda, not carry the ball for them.
The ad tech renaissance
I'm a big power user of Alfred. I've created a lot of custom workflows in Alfred to automate things in macOS, such as setting up dev environments (window management) or using the Dash workflow integration. The power of Alfred is in its workflows and workflow creator. Alfred + Hammerspoon is particularly nice. (You can execute hotkeys in Alfred that trigger Hammerspoon init.lua bindings)

I can't tell if Zazu is just a replacement for simple app launching, or if it has the ability to do everything Alfred's workflows can do.
Whilst this was a big blunder, the Apple Maps project was an absolutely enormous undertaking. The Google Maps app itself had an almost 10 years head start, beginning life in 2003 at a startup which Google purchased. I think it's impressive what Apple managed to put out even though it fell far short of Google's work.
Yes and then they will make the battery thinner than the CPU cooler and instead of solving that one foot will sit slightly lower than the other three and the whole laptop will wobble on a desk.

The iPhone6(s)/7 camera lens is such shockingly bad design I still can't understand how Apple justified it to themselves.
>Let's try a little exercise here. Stipulate that it's malice, and then generate the narrative in which malice makes sense.

Sure. Kaspersky creates security software. The FSB benefits from vulnerabilities in antivirus software. Kaspersky knows this and puts company resources into particular areas. ie how to spot the next stuxnet, rather than fix bugs like this.

The FSB does not need to write the source code (for Kaspersky Anti-virus) to benefit from vulnerabilities. In fact NSA, GCHQ, and FSB all benefit from subversion of https.
I advocate all memory safe systems programming languages, going all the way back to ESPOL on Burroughs B5500, in 1961!

Because I am old enough to remember when C was only relevant to UNIX users and those of us that care about quality code were able to enjoy much better options.

It is not possible, because one seldom works alone, so regardless of whatever laboratory attempts to write safe C code, they all fall down when the team reaches a size of two, or dependencies to binary libraries are required.

C++ is also not free from this. Regardless of the language features we are able to use, there are always a couple of guys that code it like C, thus making an hole under the castle walls.

As for Rust, as any compiler writer knows the implementation language has very little to do with the language being compiled. If LLVM was done in Java, as Chris initially thought of doing, Rust would be using a Java compiler instead.
i think this is useful in that against unsophisticated attackers and people who don't know it is there the protection will trigger. however, it sounds like it only is going to be triggering when a process forks. so if you have some exploit that raises your creds then just don't fork and you don't trigger the detection. you can do everything evil in the system you want to do without forking. and if you want the convenience of a shell you can just chmod suid a binary and exec that. anyway, i think this generally idea is interesting because you can do a lot with it and if you keep what you are doing a secret (because you are running a public cloud platform for example) then you can have quite effective protection against attackers that don't have insider information. but if you are running a public cloud probably one of your biggest threats are insiders. so meh.
I have some knowledge of the ticketing contract with a small independently owned venue (posting anonymously because I don't want to share their business details in an identifiable fashion). We contract with Ticketfly, a Ticketmaster competitor (Ticketfly is owned by Pandora). Ticketfly may not have as many dark patterns, but they also charge material fees (on a recent transaction, close to 30% more).

I can confirm that while Ticketfly keeps the fees, they pay the venue a pretty substantial contract-signing fee every time we renew. In this fashion, the act gets a certain percentage (even 100%) of ticket sales, but the venue ends up participating in Ticketfly's revenue stream on top of that. I'm sure Ticketmaster and others have similar strategies for creating and concealing incentives. While some ticketing companies may be abusive, there's a certain amount of letting the ticketing companies take the heat for revenue streams that others (venues and performers) benefit from, either directly or indirectly.

Separately, on one point OP is wrong: "Facility Fee" goes entirely to the facility and would be charged at the box office as well.
The described attack doesn't sound convoluted at all, it seems very practical.
Depending on your definition of "AV", of course, but: intrusion/threat detection is a need for every modern OS in some capacity regardless of how "secure" the OS is or not.

Even if you have the most secure kernel and no threat might ever escape user space, you'll still have pissed off users when they find out their stuff is all up for ransom or deletion.

"AV" is a component of a secure operating system, not an "add on" you only need for a "bad operating system".
(the Rust compiler is implemented in Rust, though we do call out to LLVM for codegen purposes)
The more state you save, the larger the latency in handling the interrupt. And the amount of state in modern CPUs can be quite large indeed.
Indeed - it goes against everything we know about human nature. Have humans ever spontaneously and independently changed their own behavior, at their own inconvenience, en masse? No - not without strong economic, social, or legal incentives to do so. The gains we make in these areas are pretty much all going to be technological, not behavioral. As you point out the technologies are going to need to minimize the cost and inconvenience to human activity. The day it becomes economically irrational to not use renewable energy is the day that we beat climate change.
Try using Linux with a Windows VM (if required). I have a computer running Arch Linux + Plasma and it is quite nice. With a bit of tweaking you can get a OSX like or Windows like desktop environment. I will use the Windows VM to connect to a VPN and run work applications that require windows, but I can get my email and documents easily through Office365 90% of the time.
This article tells us little about Nafta.

Also, it's written 'NAFTA'.
GC could possibly expose a program to timing side-channel attacks.
This is true of every language: e.g. Python has ctypes, Haskell has Foreign, Java has JNI, etc. It's a matter of defaults/conventions rather than something being literally impossible to screw up.
I will use Clipper open source alternative called Harbour.

I started using Clipper in 1986 and some of 1986 code still runs today.
Clipper was a compiler for Ashton tate dbase II language.

Harbour now allows to run old code on windows, linux, Mac, Solaris and a bunch of other less common OSes, both in text mode or using some gui lib.
It will also run on android and ios (using Qt).
Does kaspersky AV also keep a DNS cache? That would be convenient.
Top 12 Clojure Books
Bike paths and roads are diligently cleared/salted in the Netherlands. So many people rely on bike paths to get to work or their train that I doubt ride sharing or taxis could handle the load.
A more relevant point that would disqualify Haskell is the fact that its runtime (or rather, the GHC's runtime) is nowhere near predictable enough for the realtime guarantees that time synchronisation software would require.

A Haskell DSL that outputs some safer low-level code would be a more likely choice (for example http://hackage.haskell.org/package/atom), but Rust is both more popular and has more commercial support.
I think that's a very expensive computer for $50,000
I generally expect to use a Mac for 4-5 years after I've purchased it. I've added memory to every Mac I've owned so far at some point in its lifecycle. I have a hard time believing that in 2021 16GB of RAM will still be sufficient.
Best wishes for your project. Why the South pacific ?
How Customers Perceive a Price Is as Important as the Price Itself
Once again: the attacker here already controls TLS on the machines that are affected. They don't need to collide certificates. By design, they not only have the plaintext of every TLS session on the machine, but they are also the client side of every TLS session originating from the machine (they terminate TLS locally and proxy it over a new connection they control).

I feel like the people claiming this is a smoking gun backdoor don't really understand what it means that Kaspersky's software is designed to proxy TLS. Yes: it is batshit that they proxy TLS. It's so batshit that this particular bug makes absolutely no sense as a backdoor. That idea is Xzibit-level crazy.
> Isn't this also true of Rust, with its unsafe keyword?

> None of these languages are completely safe

No, but the first time I encountered an unexplained segfault in Rust was the first time I've ever found & fixed the cause of a weird segfault message in just a few minutes, because the mistake was in the 12 lines I had written inside a clearly marked unsafe block rather than the other ~3000.

Without something like unsafe blocks, finding known bugs and auditing code for other "weird" memory issues means looking much wider (and often, screaming "what the hell are you talking about?!" at the screen on a routine basis).
Eating a low-carb diet is a kooky theory?
JavaScript is the language most likely to be familiar to the audience I'm trying to reach. But at a certain point, it gets in the way of explaining an idea rather than making it easier.

I think this essay stays on the right side of that trade-off.
For what it's worth, I remember seeing a shower system, a few years ago, out of Scandinavia that recycles water (5 liters used instead of the normal 150 liters). IIRC, it's the one in the video [1].

On a personal note, it really is amazing how little water one needs to shower with when using a bucket, as I once had to do while in Brazil.

https://www.youtube.com/watch?v=OYoeHFJAyhU [3m50s]

Edit: It seems they're hiring, too.
https://orbital-systems.com/en-eu/about-us/
You're framing this as being harmful to the original creators of these works, but I'm not sure I can understand that, since the original creators have/had full control over their copyrights.

If a creator only desired widespread distribution, they could do it by explicitly putting their works into the public domain, or by only selling time-limited exclusive copyright licenses.

So why don't they do that?

(My take is that it's because they would rather try make a living by selling/leasing their copyrights, and perpetual copyrights are worth more money than limited ones.)
The most obvious examples would be the widget classes all GUI frameworks export. Java has some interesting classes for networking, like its AbstractHTTPServer, and Applet. Most OO languages have some variant of Thread or Runnable that is built this way too.
A physically smaller battery usually translates into a weight reduction. I'd even argue that it's the point of laptops: A mobile/light computer. But how you balance the two is a matter of opinion.

If you look at the amount of battery-saving features they have been working on, it's obvious that they focus on lowering consumption instead of engaging the spec numbers game.
You can't stop at that point in my comment. You have to read the whole thing first. I'm not asking "does it ever make sense to backdoor Kaspersky AV". Clearly it does.
Mix | Product Designer | San Francisco, CA | ONSITE https://mix.com

Check out our awesome opportunity for a product designer here: https://jobs.lever.co/mix/4bedf056-0c14-4091-a616-e9f47a00fc...

Our interview process requires an application via the link above a few conversations with key folks in our small, close knit team.

Check out https://mix.com/join to learn more.
I think your misunderstanding surrounds the amount of processing required to render HTML on the server, if you believe that rendering JSON is just as expensive, I'm open to the discussion but I don't agree.

Usually these applications are compiled once, and delivered by CDN. That's a huge savings.

Also I'm not saying the speed of Google Maps in your browser is acceptable, but with tools like Webpack Chunking, you can optimize even the initial load to nothing. This is a software architecture problem, not a javascript problem.
Thanks for this context. I and others in these comments were under the misapprehension that this meant the drought was gone. See what I mean?

I feel you made the case for explaining it to the audience even stronger.
Yes, I believe they do. But it's not as bad as people think; while they will have your emails or at least likely will, people underestimate their signal / noise problem. I think as often as they're doing horrible super spy stuff, they're drowning in garbage and can't find what they need.

Excessive paranoia and Bay Area magical thinking will tend to claim that the NSA can solve this problem by sprinkling magic "big data" sauce on it but it's a really hard problem if you are them.
The acts do not dictate the ticketing agency, the venue does. These ticketing agency will have an exclusive for every event at the venue. Occasionally, an artist, usually via their fan club, will sell tickets themselves using services like Brown Paper Tickets.

If you want to see a concert that can sell out very quickly, buying tickets online is the only option. The only time I have used TM is the past several months (I go to a lot of shows), was for a concert that eventually sold out in two minutes.
Ask HN: Does software exist to digitize scanned books and articles?
I've noticed that when I view a PDF of an old book or article, often I can't select and copy text. I assume this is because (1) text selection is disabled somehow, or (2) the document is essentially just a collection of images. Does software exist that can convert a printed page with a lot of math notation into a truly digital document? I'm looking for the same level of quality as TeX. Thanks!
There are a number of issues with this. One, Los Angeles is VERY sprawling; people are traveling from every direction to every other direction, there are no easy routes you can make that will cut very much traffic. You would need to turn a LOT of streets into one-ways with bike lanes.

Two, the traffic density and management is crazy here. So many traffic lights and stop and go traffic. Major streets are constantly crossing other major streets, which require long stops at lights while the other major street moves through. Riding a bike in the area is especially hard, because you are constantly having to come to a complete stop, wait for 3 minutes, and start again.
DeepMind Lab: A customisable 3D platform for agent-based AI research
It also might be useful, as noted https://www.arb.ca.gov/fuels/lcfs/workgroups/lcfssustain/han... to simply not grow certain low cash crops like alfalfa, wheat or grain in California given the amount water use required in more drought stricken areas.

In addition to this, we can also think about overall energy efficiency of consuming a product itself. For instance, potatoes yield more energy and protein than most crops grown.

Given the situation, if we want food we will have to pay the price in terms of water and land for producing the product used to produce that food.
Thanks for the link! I appreciate it. I look forward to reading it.
Perhaps slightly, but there's a huge difference between cold air and cold water when it comes to removing heat from your body.
I had to look it up to check what I was about to say: https://en.wikipedia.org/wiki/Genetically_modified_crops#Gly...

In the case of roundup ready crops, it sounds like it's both more effective as an herbicide and less toxic. The Wikipedia page didn't say whether that was toxicity towards humans. So in that sense roundup ready crops seem to be net better for the consumer anyway.

Jury seems to be still out on whether roundup is actually harmful, leaning on the no side at least according to the Wikipedia article on Glyphosate.
It looks like GitHub now supports commits search
Although I'm satisfied with the choice I made for what to put in my essay, I want to thank you for pointing out the gaps between my essay and the real world, and for doing so in a forceful way without crossing into being querulous.

This kind of discourse is, IMO, an example of Hacker News at its finest.
The only real mess is the project's continual struggle against the language's verbosity and limitations. I try not to think too often about how much shorter some section of code would be if it were in Flask or Django.
I did. You created a ridiculous narrative, that seems to amount to a strawman. No one ever said that FSB wrote the antivirus program.
It's not like your rust safe ioctl wrapper is going to be any less code, though.
An OS can still use xsave incorrectly, such as by hardcoding the expected size rather than detecting it at runtime, or by getting some aspect of the CPUID leaf 0xd enumeration wrong. I wouldn't find it surprising if an initial implementation got one of the details wrong, resulting in a bug that wouldn't manifest until the next time the xsave layout changed.
I don't doubt that price fixing happens.

I doubt that small businesspeople can out-compete big cartels who want to dump on them.
What's the best resource for learning about QC and establishing foundation knowledge so that I might be ready to break into this field once they have broad availability?
Not sure why this post was downvoted but I would agree given that the meaning is the same for both statements. Is there something I am missing?
Dyou mean $50 trillion?
It isn't POSIX, but Linux does have the very useful signalfd, which creates a file descriptor that accepts signals. This is a good solution for some types of programs.
How many famous people will die in 2017?
If we're expanding the set of possible bugs to "the kernel can do anything and overwrite anything", then it doesn't matter what language you use.
> I suppose the probability you're a malicious actor given that you've produced a vulnerability rise substantially

That's ridiculous on it's face - all software has vulnerabilities, and not all malicious actors produce vulnerabilities. Heck, the vast majority of malicious actors don't even discover vulnerabilities, they simply exploit them.
you might enjoy looking at category theory for the sciences by david spivak. there's a hardcover edition, but it's available online as well.

[html version] http://category-theory.mitpress.mit.edu

[old pdf version] http://math.mit.edu/~dspivak/CT4S.pdf
It started happening immmediately after updating to iOS 10, and not just on my phone. And that's just the start of it; iOS 10 has tons of other inconsistencies and annoyances. I used my several-year-old iPhone 4 the other day and it was a way better experience.
This is little different than people getting together and saying conspiracy theories in person to their social groups.

Facebook is by no means the exclusive place to find this behavior; Twitter is even worse. Email is the original vector for this bunk news. If you look back ten years in your email inbox you can find similar bogus forwards at the same frequency, when it was en vogue to send it via email instead of a Facebook post.
Ask HN: Is buying a house in 2017 a good idea?
I'm sitting down this week to think about my finances.

One option is to invest in a house.

I'm researching the topic and will appreciate links to related HN discussions, analysis - calculations, past experiences, current market conditions & future predictions (interest rate increases et al) .... keeping duration of holding and investment capacity variable.

(especially in the bay area)
A favorite quote of mine:

"If Hitler owned Halliburton, it would not be as evil of a company as Ticketmaster."

https://www.reddit.com/r/pics/comments/c4704/fuck_you_ticket...
The pain pill epidemic isn’t going anywhere until we end coal’s dominance
My narrative has in fact nothing whatsoever to do with the FSB. That's why I said "whatever entity".