skysight-inc/HackerNews huggingface dataset:
> If you read the article referenced by that thread you'll see that a major issue with string copying is due to having a lot of bad interfaces taking raw C pointers so code at both side of the ibterface need to make copies exactly because the raw C pointer doesn't guarantee exclusive ownership. The remaining issues are due to a badly optimized string buider in Chrome and failure of pre-reserving vector memory which lead to many copies on resize. This last issue is fixed with move semantics in c++11.

The point is that something like:

List.filter (fun s -> String.length s > 0) list

simply cannot be done efficiently, because you require either copying or shared ownership for the strings. This also occurs naturally in a number of other situations, such as storing strings in objects.

> Std::remove_if works genrically on any range. Boost (and the range TR) provides iterator views when you need lazy evaluation.

std::remove_if is destructive. Iterators are not the same thing as a functional filter operation.

> I'm sure you can, in the end you can implement anything manually.

The point here is that a transactional system is more powerful than RAII.

> Only if you use shared ownership. Otherwise is completely predictable.

If you don't use shared ownership, then you're basically limited to lexical scoping.
It's hard to take people seriously when they're a US citizen but afraid to leave the country because of the travel ban.

You're a US citizen... try to understand what that means and stop being acting like a victim...because you aren't one.

Pretending you may not be allowed back into the country is just causing more confusion and spreading fear to people who have nothing to fear.

On the other hand, if you are not a US citizen and from a banned country, I'm sorry. Just like every other country on earth we have rules about entering ours. Sometimes these rules aren't favorable for you and that sucks. Earth is a big place though and the ban will not last forever.
Example Project: Express with JWT, Tested with Mocha, Chai, Sinon and SuperTest
" Reproducibility lets you compare your entire system against known-good states."

If you have a known, good state, then you don't have to. You simply use the source or binaries in the repo after checking hashes or signatures on a few mirrors. If your state is that bad, then you're already compromised with possible a rootkit.

"Even if you have all that, how can you be sure no one tampered your system at some point?"

That takes way more than reproducible builds. You need source code for a compiler that doesn't have 0-days in it in terms of backdoors, optimizations that eliminate security checks, or passes that create exploitable faults. That's called a verified compiler. Only one exists for C (CompCert) that's proprietary with quite a few open ones for ML languages. The SCM's distributing that source code must be secure so they aren't adding modifications to source or your OS binary you started with. During transfer, they have to be signed or the transport has to be secure. You then need some kind of local tool you can trust to bootstrap it. If you trust nothing, you're going to be using ancient hardware you bought in person with cash to run an interpreter you wrote by hand that executes something equivalent to a small C compiler you use to compile the others that you inspected by eye or trusted via 3rd party review w/ hash/sig confirmation.

If exotic attacks like Karger's are in your threat model, so are 0-days that are accidental or deliberate along with endpoint and SCM attacks. Reproducible builds don't protect you from much in that model. The stronger methods, from endpoint protection to SCM to local tooling, will pay off over time in more situations given they're independently critical. It's why Karger et al put them in first standards for INFOSEC to begin with.

The other problem is that making all binaries come out equal creates more of a monoculture that aids attacks on endpoints. Many good tools in the field automatically harden C programs by making them memory or data-flow safe. Softbound+CETS comes to mind. Others obfuscate the hell out of them on a per-user basis to reduce odds of one-size fits all attack. You can't use these techniques with everyone having same binary. So, it's a step back from existing compiler and system security methods in total assurance you can achieve.
Some deep essential background on the legacy of Columbia students hacking Drosophilia Melanogaster:

http://www.columbia.edu/cu/alumni/Magazine/Legacies/Morgan/
Let's see ...

I want a regular title bar in my application with the full title of the current tab.

I don't want rounded curves on my tabs. I'd rather they just look like normal tabs.

I want the tab bar beneath my address bar. Australis removed tabsOnTop=false.

I want back and forward to be separate buttons, and not integrated into the address bar.

I don't want the refresh button on the right-hand side of my address bar. I want it after the back/next buttons.

Firefox 28 with tabsOnTop=false is what I want. Classic Theme Restorer gets me there, but with rendering issues, especially on Linux/BSD. And Mozilla already has plans to kill it when they remove XUL extensions.

None of the Australis changes increased usability. They just changed things for the sake of it, and took away a lot of flexibility in customizing the UI layout. I have a lot of difficulty changing up the way I use programs. I've had the same browser layout for 15 years. Nothing wrong with it. I don't want to retrain muscle memory all the time because some designer at Mozilla was bored.
Don't companies already do this? The price for a copy of cs:go costs different amounts in each country

https://steamdb.info/sub/54029/
Agree that secure source is required but the compiler trust issues become different with reproducible builds: you only need to trust the initial operating system binary and intermediate source code. The next compiler is built reproducibly from the old compiler.

The maliciousness in the compiler would have to be introduced in source code (which is harder) or somehow already in the initial operating system binary (disregarding bad hardware that is bad for all systems testing builds).
Just in case you're not talking about cash donations directly to the recipient, but talking about donated labor, labor is not deductible as a donation.

Except for the amount that the donating entity paid money to the individual employees providing labor to the charity. Is the LLC taxed as a "C" corporation? Then that's the entity claiming the deduction for paying wages. Did the LLC elect to be taxed as a proprietorship or partnership? Then you'll have to ask your accountant. Possibly labor is not deductible, if the owner is providing the labor.

Anyhow, for labor, no pay, no deduction. This prevents individuals claiming their hourly rate is $10,000 an hour, and deducting the "donation" of their time.

For your personal tax return, you need to have enough deductions on Schedule A [0] to cross the threshold of more than your "standard deduction", which depends on your marital and family status, to have the cash donations, or in-kind material donation be particularly deducted.

If you own a house, your interest on the mortgage will put you over that "standard deduction" threshold. See line 40 of Form 1040 [1], and the instructions [2] at page 39, for a start.

[0] https://www.irs.gov/pub/irs-pdf/f1040sa.pdf
[1] https://www.irs.gov/pub/irs-pdf/f1040.pdf
[2] https://www.irs.gov/pub/irs-pdf/i1040gi.pdf
What planet is doing is certainly impressive, but this article is inacurrate.

> well as the newer 11.8 inch scale and track and take photos of items as small as laptops from space Planet, for now at least has the lead.

You barely can spot a human on 30cm/pixel. We barely can get automatic human detection on 10cm/pixel. I would guess the cover photo is somewhere between 1-5cm per pixel and was likely collected by the drone.

> For the first time every square inch of every landmass, all 58 million square miles of it, as well as a good chunk of the oceans, will be tracked, monitored and observed in real time

This could be true if by real-time they mean "at least once a month" or maybe "once a year". Imagine large forest - there are barely any use cases for regular monitoring more frequent than once a week. Imagine how much data it would generate.
Data Hoarding Among Employees Latest Insider Threat Nightmare
The main problem I have with the keyboard is that the small travel gives it very small tolerances for to achieve the "clickiness", and after a few months use I can already feel that some keys are less clicky than others, due apparently to uneven wear in the mechanism among different keys... I wonder if there'll be a "keyboard-gate" situation in a year as more people notice this, or if I'm an outlier.
This article makes many sweeping generalizations and references unattributed sources and people.

This is barely journalism - anybody can make unfounded accusations, but to indict an entire sector of industry based on 2 past incidents and one current pending unsubstantiated one is ridiculous.
I have been using the RÅDIG for probably 5+ years, if one doesn't melt the handle off, I think it will be there forever. I gave away the working Moka pot and then recycled the 3 unrepaired, burnt o-ring Moka pots sitting in the cupboard as I am never going back. The filter cup in the RÅDIG is indestructible. We also have a spare incase Ikea decides to discontinue it.
Females have both X chromosomes active, but only one copy per cell due to Barr body deactivation. Some female cells have one copy active, others utilize the other copy.

This scheme can lessen certain X-linked genetic disorders in women since not all cells will be affected.
On one hand, I'm in favor of critical thinking. On the other, I kind of want to say "just leave me alone and let me enjoy the book!"
To someone who isn't a "coder" it may be difficult to tell the difference between someone cranking out landing pages with HTML and CSS, and someone building the checkout flow for a different part of the same app. If you were uninitiated and saw both colleagues working with text editors (with fancy syntax highlighting) and the command line, you'd probably call them both coders. Superficially, the work looks similar. The semantic change you've noticed could possibly be attributed to the tremendous increase in web development in the last decade.
Well Facebook built some actual technology. They aren't just making picture filters for genetalia.
Distributed Schema Creation in GraphQL
I thought his point was just that GitHub is still private. Snap going public is a different situation.
Or people start to unionize. They aren't perfect, but if the work place is poisonous, how could it get worse?
> They aren't just making picture filters for genetalia.

And therein lies a wildly inept understanding of Snapchat that is so common among people outside of its main demographic.
Can you elaborate here on what you mean? I didn't follow this sentence:

>"A majority of the money that people will earn will just offset the difference in salary between Snap and larger more established companies that give out liquid RSUs - like Google."

I agree with you though, its not even just the full 4 year vesting schedule either because there's usually a 1 year cliff before the 1st year of vesting begins. And then of course for worker bees there's a 6 month lockup period where they can't sell while the fat cats are getting rich by selling on the day it opens.
Holman was writing about slow exits, and how they keep employees illiquid and even claw back equity from those that leave.

Snap is not a slow exit. It may or may not produce a bunch of millionaires but it's definitely not what Holman was complaining about. In fact he would probably praise them for going public ASAP, like the old days.
Not supported in most browsers as said in this thread, but there many other mitigation strategies that do work. Here's a complete writeup: https://dadario.com.br/what-is-csrf/
With a $20B valuation, With straight up ownerships having a couple of bps would do it.

How many people out of the 2000 have 0.02% of the company after its dilution? Maybe 150--200?
That's an abomination of coffee. I feel like if you try something freshly roasted (no roast date on the bag of beans = it's old), you'd taste the difference.
Li-ion battery raw materials are witnessing price surges in 2017
I opened this thread to look for Lotus Notes.
It's probable that, as time goes on, the interestingness threshold for linking to a post on the blog will get higher, perhaps even exponentially.
You are making the same mistake that a lot of programmers make. The value of a product to the user base is almost completely unrelated to the tech they use.

I'm somewhat reminded of when Drew Houston launched Dropbox and showed it to HN. https://news.ycombinator.com/item?id=8863 The comments are somewhat dismissive.
Uber Taps Eric Holder to Investigate Discrimination Claims
An 8 year release process lines up with the release of touchscreen-enabled windows 7 and 8. Sure, they may have been investigating it before the windows release, but the choice to produce this hamfisted feature, rather than a touchscreen, still looks like a competitive reaction.

Many things take lots of time to develop, and lots of things never make it into an actual release.

EDIT: khaledtaha's comment above sounds even more plausible, give the strategy Apple currently appears to be pursuing.
It's not even a little yellow box now. Fairly recently they are now battery powered tiny clips over your finger with a built in display just big enough to show pulse and oxygen levels.

Apparently they are cheap enough and so easy to use that nurses are buying their own and carrying them around along with their stethoscopes.

The only concern, like with stethoscopes, is they are likely to be the dirtiest instruments in the room and they are so quick and easy to clip on a finger it's easy to forget to wipe them down before and after each use.

To try to cut down on this germ vector, they also make a disposable version of the sensor that goes on your finger that can be left with each patient instead of traveling with the monitor.
The problem is if your immune system is too permissive it's leaving around damaged DNA lines that can later become even more damaged in a cancer kind of way.
The article also links to a file cpp_magic.h[1] which uses and expands upon the techniques the article describes, and is really quite well explained by the comments.

[1]: https://github.com/18sg/uSHET/blob/master/lib/cpp_magic.h
Maybe you can make the coil for a phone cheap enough you can just give guests a wireless phone charger they can just stick to their phone and charge it while they walk around the park.
Wouldn't that change the order of elements?
Register allocation is the key to victory.
Small Ruby conventions note: ! means "dangerous", not "mutable." Yeah, sometimes the kind of danger you're looking at is mutability, but it's a bit broader than that.
You can use "github navbar color" chrome plugin to remove the black navigation bar of github.
https://chrome.google.com/webstore/detail/github-navbar-colo...
Cool. Time to dust off that old PC in the attic.
Mmh. Yes, but I think the two are two sides of the same coin. Not only are exits rarer, but the companies who do exit produce fewer people who are then in a position to keep the innovation cycle going. Holman touches on a few reasons why in his post: "...concentration of wealth, and legal stipulations like gnarly 90 day exercise windows".
Hacking static hosting services
I agree. You need to be able to differentiate between 'types' of fake news. It means different things to different people. Three perspectives I can think of at the top of my head, but it's a sliding scale:

1. Flatout lies with no factual basis (Hillary Clinton/Donald Trump is a lizard person from Mars)

2. Mis-truths of accepted facts, or mis-representation of statistics (climate change)

3. Opinions that you don't agree with (ACA is good/bad, or The Media is good/bad)
Add -Wdouble-promotion to the list. For microcontrollers which implement float in hardware and double in software, it can be a lifesaver.
I don't know if Tim Berners-Lee thought about layout. SGML was text with semantic information, and HTML was text with cross-references. Back when displays were tiny low-resolution things little better than terminals, and most web pages were just text with a few images, layout didn't matter. It was all ugly. Now that displays are larger than books, and pages are heavy enough to contain the entire Gutenberg Bible, people are starting to care.

Maybe in 5-10 years, with enough server-side computing power and bandwidth, sites will ask for the client's screen size and desired font size, then serve an appropriate PDF.
Is it really wildly inept though? I truly cannot wrap my head around what value Snapchat brings the world, outside of maybe yet another way to ultimately advertise to young people. Just to be clear I'm not saying you're wrong, I just don't get it.
Why are you comparing Snapchat to video game developers? They are a social media company and advertising platform and are pioneers of a new technology (AR). They should be compared to their peers.
The difference is the price of that lottery ticket isn't $2, it's your remaining life.

As you would expect most don't take that gamble.
> The other problem is that making all binaries come out equal creates more of a monoculture that aids attacks on endpoints.

This is a red herring, for two reasons. First, even if the build is not reproducible, the distribution produces packages from some source code and those packages are fixed. If one is installing a distribution's binary packages there's no more or less of a monoculture if that package can be reproduced.

Second, the sources of non-reproducibility we're trying to fix here come from things like timestamps embedded in the binaries, arbitrary directory file ordering, etc. These provide little to no meaningful diversity in the resulting binaries anyhow.

Having the ability to reproducibly build packages does not preclude the application of tools or techniques to introduce diversity in the compilation process or otherwise obfuscate built binaries on one's own system.
> "The M1A2 Abrams main battle tank has an MTBF of 27 hours"

There's logistics and there's this. How is this at all acceptable? In a real war with the likes of Russia it's entirely possible that supply lines could be cut off for extended periods.
After taking an architecture class in high school, I carried a drafting eraser for years which just worked so much better than built-in pencil erasers. I think it was made by Staedtler [1]. It's difficult to deal with a regular eraser again after getting used to that.

[1]: https://www.jetpens.com/Staedtler-Mars-Plastic-Eraser/pd/796...
There's a big difference between "no drinking" and "no drinking relating offenses"; it's the same as the difference between "no sex" and "no sex crimes".
Sometimes virtue is its own reward.

Its funny that you bring up Slartibartfast's Campaign for Real Time, which was based on the real life Campaign for Real Ale. Sure, CAMRA didn't put an end to awful mass-market lagers: but they were able to keep real ale available, and continue to do so today.

Perhaps those of us who appreciate semantic markup can do the same.
Most of the people I know inside its main demographic are just using Instagram now.
At least some of them appear to use a more general-purpose method than that. They actually load pages and execute scripts with document.referrer and the Referrer header faked-up. Though it's presumably more resource-intensive, it has the benefit of working for a wide variety of analytics setups, both hosted and server-side.
Thanks!

- bad sentences/mistakes - users can report sentences with errors. I'm notified and those sentences are then removed from their queue. Pro users can also ignore sentences, I'm thinking I may make this a free feature in the future as well.

- Difficulty is just by word frequency at the moment, what kind of heuristics do you have in mind?

- I'd definitely like to be able to measure the effectiveness of Clozemaster somehow, but I'm not sure what kind of hard data I could come up with. Perhaps in the future I can come up with some kind of test/experiment to compare traditional single word flashcards vs. Clozemaster, or test reading comprehension somehow after playing Clozemaster for a certain period of time.
> I felt that "bang" methods should only be used for methods which mutate the receiver.

I mentioned this upthread too, but it's a bit broader than that. Consider http://api.rubyonrails.org/classes/ActiveRecord/FinderMethod... vs http://api.rubyonrails.org/classes/ActiveRecord/FinderMethod... for example. The ! version raises an exception rather than return nil.
They did care but in their short sighted way. They don't really mean "save company", it means dancing at the tone of the HR boss, if they truly cared for the company they'd do something about this.

So, they just don't care about employees
I agree. However, Michels' Iron Law of Oligarchies doesn't have anything to do with sexism.
Baremetrics has been notoriously slow for the past 2 years - it should not take 10 seconds to load up static graphs (cache them and recalculate them on the backend every x hrs)

i know they have a small team but their inexperienced tech/backend team has costed them dearly (again i know they probably have worked hard but you can tell them they are inexperienced)
Ask HN: Has any of your Gmail emails gone missing?
At the moment I have 5 instances where incoming emails sent to my free Gmail address at different times from different company servers have gone missing - they are nowhere to be found: not in all mail, not in trash, not in spam. The senders didn't get any error or bounced back messages.

I'm really pissed off because all the emails were really important and I was only able to confirm that they've ever being sent via phone call. Oddly enough but Google has "emails gone missing" support form which I filled out. https://support.google.com/mail/contact/missingemails?rd%3D1

Now what should I use instead? I'm ready to pay for a more reliable email provider. Who would think that Gmail isn't?

P.S. I also found this comment here
https://news.ycombinator.com/item?id=12247401

"GMail once ate (bypassed spam and instantly deleted it, silently) an email filled with travel itinerary for an interview, causing me to miss the flight booked for me and the company I was interviewing with to have to book a second one (~$1k). If you find this hard to believe, go check your spam folder and see how many emails you have. Do you think you're really only getting ~1 spam message a day? This is the dark side of Google's spam filtering."
I guess because physics based lighting engines with online realtime interaction are more complex than social networks and messaging.
> No. And the reality is that IP connectivity is not much different to these other utilities.

I understand where you're coming from, but it is different. You have ample power to power your home; utilities can fulfill whatever your power requirements are.

The same can't be said about IP. I am literally incapable of live streaming from my parents house, no matter how much I'm willing to pay. There's no internet option, among the few available, that are capable of fulfilling my requirements.
Leatherman wave looks way better than my beloved old micra.
My understanding is that Snap's financing terms have actually been very good. The 2 co-founders each still own over 20% of the company each which is pretty exceptional. I'm fairly certain that some of their financing even involved selling common (not preferred) stock.

A 20B+ exit (assuming that's where it ends up) is a pretty phenomenal success. That's 2 million bucks (well above your target) per basis point. A pretty huge chunk of the org in traditionally highly compensated roles (product, design engineering, and kind of management roll, etc) will do very well.

You are underestimating how big of a success this is (again assuming that the IPO goes well) for Snapchat stockholders.