skysight-inc/HackerNews huggingface dataset:
Keep in mind that there's a middle ground here though. ARM 32bit micros still have basically no support from Rust et al but often have enough resources (Cortex M7 anyone?) to do things where it would be nice to have memory safe dynamic allocation. Programmers often have to resort to convoluted static data structures for some tasks where dynamic allocation would be useful and don't get me started on the NXP LPC-like chips that have two cores with shared regions.
So has any person or organization done a statistical survey of a body of bug reports (like CERT) and characterized how many bugs are memory safety related?

I see this SEI blog entry [1] that cites a report, with a bitrotted link (I think it's [2]). The blog summarizes the report associating buffer overflow as a source of "14 percent of software security vulnerabilities and 35 percent of critical vulnerabilities making it the leading cause of software security vulnerabilities overall." Though it seems to be the easiest to track and a leading error, buffer overflow is only one category of memory safety problem.

[1] https://insights.sei.cmu.edu/sei_blog/2014/08/performance-of...

[2] https://courses.cs.washington.edu/courses/cse484/14au/readin...
Right. Patient compliance is a hard problem. But doctor compliance with basic protocols is also very bad, and seems fixable with computers.
The website isn't intuitive on mobile. Do you have to do something special to get the Java client?
Ask HN: Who is giving quick online coding tests as step #1?
Some companies ask candidates to do a quick online coding test prior to moving forward in the conversation. I find it a little rude when you're not fresh out of school and have 10 years of exp. Feels like cattle...

Which companies do that? I'll bypass them in the future (maybe you too?)
Right, and if you reduce a quote to a tautology, you miss the point.

It's like complaining that a metaphor isn't literal.
to avoid repeating myself here: https://www.reddit.com/r/javascript/comments/6212ym/glimmerj...
> What definition do you refer to?

The one that goes through the marker. If there's any ambiguity due to another meridian having the same name, I trust you can distinguish them with your common good sense.
I just think of Lisp as its own world. They had to build Lisp machines to work on machines in years past. Today we still see growth in Lisp and seeing how Racket is developing and Clojure shows that Lisp has room to continue to innovate.
Well, the standardization was covered by others, so here's stuff about forgery:

The Turkish Govt's new ID allows you to- no, it requires you to set a password. You are given an 8 character PIN code when you apply for the ID, and you can change it from the kiosks at the citizenship bureau. It allows between 4 and 16 characters (while I chose 16 myself, most people will choose a 4 character one :( ).

Plus, even if it gets stolen along with the password, technically the certificate can be revoked as soon as you report it, preventing forgery.
Thanks for the link, that's indeed extreme. It's a pity that the original source link is dead.
Mark Cuban learning machine learning with Python
LastPass is scrambling to fix another serious vulnerability
Edited the post, thanks for the note :-)

My English is usually decent, but I still sometimes make stupid mistakes.
Well that's one aspect of TempleOS that appeals to some and that is fine.

But you an also appreciate TempleOS from other perspectives such as how HolyC is compiled, dynamic documentation, etc.
I too agree on usefulness of KM. Can you share that KM macro please?
ARIA Grid: Supporting nonvisual layout and keyboard traversal
>but has gone downhill in the last 6 months.

sorry, didn't you just prove my point? But regardless, even if we ignore the part you just added and pretend you're working in a paradise (the impression your first comment gave) - being hired as the first and only member of the IT department is not the situation most people are entering into.

I mean, it's like the major problem with bootstrapping your company as a sole founder: although you're your own boss, your boss actually kind of sucks, is bad at managing and communicating tasks and deadlines, and basically he doesn't know what he's doing. :)

I would say for obvious reasons my advice doesn't apply as much to first and other very early hires. But if there is a team you would be joining - definitely my advice will give you great results.
Coca cola isn't made up, it's a description. The drink originally contained coca leaf extract (cocaine) and cola nut extract.

I don't know about the trademarks though.
Have access to multiple world class dating coaches anywhere, anytime
Some things:

(1) I do not like putting all my eggs in one basket for telecom. I don't care if Amazon is managing the API server for my grandma's heart monitor - I never trust one TSP. One TSP = one point of failure. I hope they do something to address this. (and please don't bother replying with some assumption that multiple paths disqualifies the need for redundancy through multiple TSPs)

>Amazon Connect runs on Amazon Web Services proven infrastructure operating 42 Availability Zones within 16 geographic regions around the world. This makes Amazon Connect more highly available, fault tolerant and scalable than would be possible if a contact center solution was run from a single data center.

Amazon Connect is only offered in US East as of right now. I wonder what that means for reliability/fault tolerance. Does the user have to initiate geographical replication?

(2) I do not like relying solely on an internet service for telephony/CC. I will rely on it for most of my telephony/CC most of the time, but I see no reason why CC offerings shouldn't have some kind of offline component. I hope they do something to address this concern.

(3) I see they have released the "Streams" API[1]. It's well documented, which means I can create similar API calls for an offline replacement. I'm glad they addressed this somewhat, although I wish they would consider making a useful multipurpose soft phone so I can use SIP registrations from other systems in an emergency.

(4) The limit of 10 DIDs seems exceptionally low. Sure, once the call hits Amazon, it can go through its routing steps, but Amazon is not in control of where the customer gets the number. DIDs often serve an analytical function, especially when that's the only useful data (besides Caller ID) coming in from the PSTN. It would seem more reasonable to max out at 100 (yes even for a starter account). I hope they do something to address this concern.

(5) Getting to use their ASR is a big deal - especially over the PSTN. When I realized I'd have to write an MRCP plugin just to reliably stream audio to the Google Speech API, I gave up on that dream. I wish Google would address the concern of PSTN to the Google Speech API... I don't care about any other call center doodad, but being able to leverage a speech processing - especially Google's or Amazon's - API is a really big deal. The fact Amazon has made this available over the PSTN with the possibility of having an API make decisions from speech is exciting.

All in all, this is nice and I'm sure they have rough edges they'll polish. At the end of the day, their speech stuff is something I'll definitely be using, the other stuff does not make me feel confident it's redundant/fault-tolerant. There are just too many points of failure.

[1]:https://github.com/aws/amazon-connect-streams
This article is about rescinding a set of rules that hasn't even taken effect yet. Almost nothing will have changed as a matter of practice. Some fence sitting providers may decide it's okay to sell your information now, and it may be harder to get these rules in place in the future.
I'm considering what you say, but it doesn't ring true to my interpersonal experiences at all.

> Think about it. You are asking human beings to make personal sacrifices for no personal gain, but for the sole purpose of making your dream a reality.

My team has (real) equity and I like to believe they see the worth of the product. What attracted me to startups when I entered the game was the sense of ownership and agency in projects. That and work can/should come with a sense of reward.

> so you could ask if there is any personal trauma they are trying to avoid.

I think this would be somewhat inappropriate to ask "hey, so do you put in extra hours because you don't feel whole?". Everyone I work with knows they can come to me, even if he/she needs to take his/her house keys and to go to a second location to chat.

> You could also consider hiring hourly.

There's room for hourly consultants, but that hardly makes a team.
https://en.wikipedia.org/wiki/Marx%27s_theory_of_alienation
You probably got that idea from Steve Jobs, describing Dropbox to Drew Houston.

Dropbox is doing pretty well though, if that's the comparison Snap might be in good shape!

https://www.forbes.com/sites/victoriabarret/2011/10/18/dropb...
> GM is investing in what sells, and right now (i.e. for the last decade or two)

Yup. They haven't adopted the Andy Grove/Bill Gates/Larry Ellison philosophy of "Only The Paranoid Survive," yet. They are banking on the expectation that if/when consumer interest spikes they'll be able to use their influence to jump to the front of the line, like they did with past ICE competitors.

The question is... will the electric car market be more like the ICE market where paranoia is (apparently) unnecessary, or the semiconductor/software markets where it is (apparently) quite important.
Chinese Smartphone Users Flock to Risky Investments
I'm not sure how you've measured how often hot code reloading is used? I use it for almost all of my production pushes.

However, I agree that it's generally hard to use it for third party software; upgrades would either become cumbersome because you have to follow the same piecewise upgrade process the developer followed, or the developer would have to do a lot of extra work to ensure upgrades between releases were solid; the recent addition of atomic loading of multiple modules would probably help.
Thank you for the kind words!

Airtable is really neat indeed. But SpreadsheetDB aims to be more a database with an alternative paradigm than an actual spreadsheet editor.

Regarding the stack, it is made with Go and Postgres.
I'm used to languages like Python, that have a number of files that are modules, and to start a program you run one of them as an entry point.

C programs consist of a lot of files that are compiled and linked into a binary executable.

Whenever I've tried to learn CL, I couldn't really wrap my head around what the eventual program would be. You build an in-memory state by adding things to it, later dump it to a binary. How do you get an overview of what there is?

I'm just too used to my files, perhaps. Or I'm missing something.
I wish an experienced LISPer would explain why should one use Common Lisp over a language like Golang. Golang now has https://github.com/glycerine/zygomys for scripting. For that matter, why would one choose Common Lisp over GNU guile ? (guile now supports fibers). What does Common Lisp offer for the working programmer that is an advantage over other languages ?
Some constructive criticism... I would review your explanations to see if any imprecise sentences can be replaced with more accurate definitions. I get that you're going for a friendly tone but many times, the more accurate definition is just as easy to read.

For example this text:

>In the case accessing an element within an array or hash, it takes 1 operation to perform. Thus, we can describe the complexity as O(1) for this code example. This is about as good as it gets for algorithm complexity. Of course, while O(1) runtime code is quite fast, it may often come at the expense of storage.

It's clearer to say that O(1) means constant time access in relation to input size. The "1" doesn't mean one operation. The alternative explanations you wrote are actually misleading.
React and GraphQL Tutorial Part 3: Mutations
a lot of financial aid

Which financial aid have you got in mind? East Germany was basically cleared by the Soviet Union. The Marshall Plan went mostly to the UK and France, only a small part (11%) went to West Germany.
Actually all founders are 'insane' because growth often happens after building and launching several failures. See Scott Adams' insight on this.
An article[1] claims Wes McKinney was inspired by APL while working on pandas; some of the pandas verbs such as "ravel" come from APL.

Also, the <- instead of = in R comes from APL, although that's relatively minor. :)

[1] https://scottlocklin.wordpress.com/2013/07/28/ruins-of-forgo...
Usually, people tend to see the following problems:

* no native support, hosted language (js java)

* unreadable (java) tracebacks

* no tail call optimization

These are not my problems with Clojure, but then things I often read. I am interested in Common Lisp because of the native support.
I used Ember for about 2 years and thought so too.

Now I'm using React and I think it's approach is much better.

The API is tiny compared to Ember and there aren't much concepts, still it accomplishes everything Ember did.

I feel bad to say this, but in the modular, library heavy, NPM based JS world of today, React (and other component frameworks like Cyclejs or hyperapp) fits just in. While Ember feels like a anachronism of the big framework days of Rails. :/
Their food products always seem subpar at times. Not all but often enough that I don't shop for food there anymore.
I don't understand why people object to it as a marketing selling point - it's a new(ish) payment method that's expected to become more widespread over time. Selling your product to a retailer with "Hey, it does this too" can't be a bad thing?

>> I know people don't use their phone to pay for things here

Where is here?

I've seen folks in London using their phone to pass the Oyster/underground gates, and I see people at work use their phones every day in the on-site eatery. When I brandish my phone at the McDonald's drive-through for a coffee, the staff don't look at me like I'm crazy, they hold out the machine. I'm really not sure why you think that it's objectionable.
> We don't have memory safe languages suitable for system programming that's widely available on all kinds of architectures.

Yes, yes we do. Go is available on a ton of architectures; Lisp is available on a ton of architectures; ML is available on a ton of architectures.

Yes, C is available on more. Yes, for some architecture C is the only reasonable choice. But on x86 & ARM, there's no good reason to write new code in C.
But half of the "world of atoms" things the grandparent listed were also market efficiencies or better engineering. Trading average speed for vast improvements in energy efficiency in aircraft in order to make flight accessible to the masses certainly involved vastly more progress of a technical and scientific nature in the late twentieth century than the cited early twentieth century example of wider replication of well-understood principles of plumbing to give the masses indoor toilets.
This actually explains what's new about this: https://opensource.googleblog.com/2017/03/a-new-home-for-goo...
I recently purchased a subscription to NordVPN in light of this new legislation. They claim not to keep any logs, and I've found their servers to be quick with low latency. A speed-test right now shows 41mb/sec down and 15ms ping. They also don't throttle specific kinds of traffic, like torrents.

No affiliation, just a happy customer.
I'm looking to drop a pfsense router in front of my network so I don't have to deal with VPN on a per-device level. Other than that, selecting a top tier VPN is also on my to-do list. HN recommendations for VPNs would be helpful here!
Basically a variant on "I would buy your $1.99 freemium app, if you only added this feature". :)

No you wouldn't.
Moving Kabel Deutschland (now Vodafone unfortunately) takes 3-4 days if your new building has the cabling done.
Stability of (most) implementations and solid language standard.
>sorry, didn't you just prove my point?

Er, no.
Because even if the other two had been around then they would have probably said yes its a great place to work, which it was when I started. Things can change relatively quickly, which I would say negates your point even more.
The Kirkland Signature brand is actually typically rebranded goods from industry mainstays. Their beer, for instance, is rebranded Gordon Biersch, which is pretty good beer, by all accounts.
Glimmer.js may be more your speed!
I am sure there are plenty of people who have a preferred Lisp. It does drive me nuts how if there is a post on R the top comments are people touting Python as being the bigger player in statistics and data science (Which it isn't) or a ton of other languages.

PS I perfer Racket :)
This is a great guide, thanks for sharing.

Out of curiosity, how do other employed developers allocate time to study this stuff? Immediately after graduating from college I could spend 4-8 hours a day most days of the week reviewing algorithms and solving problems without issues. Now, after a full day of coding at work, going to the gym, coming home to prepare dinner and run other errands, I'm physically and mentally drained. I might spend an hour or two before bedtime trying to study this stuff (since I completely forgot it since I last did technical interviews 1+ years ago) but progress is slow. Of course there are weekends, but that's usually the only time I get to relax and go outside to see the sun. I now understand why it takes 6+ months for working professionals to find new jobs.
The biggest bottleneck to realizing this vision, unbelievably, is lack of funding to do large-scale, high quality whole genome cancer sequencing + high-quality treatment, family, phenotypic etc. data to go along with it.

As nice as Foundation's data is, there are few/no phenotypes to go along with it, representing a bottleneck to extracting any useful information out of it. Keep in mind that genomics is only one half of genetics (the other half being the phenotype) and is meaningless without knowing more about the patient.

On the phenotype side, EMR/EHRs are practically useless as scientific tools (doesn't prevent academics from publishing how they extracted meaningful data from it.. which has little correlation with if something works or is reproducible; unfortunately) and I don't foresee this being fixed in the current healthcare ecosystem in the US. The UK & other European governments with good data + national healthcare systems represent a better chance.

If you don't believe me, I challenge you to point me to a single study containing a comparison of 1000 metastatic sites vs primary tumors in one cancer type, with WGS. Given that metastasis causes > 90% of deaths (ref: Weinberg cancer textbook), you'd think we'd have done this study by now.

A dx company has no hope of reimbursement for doing cancer whole genomes, and does not receive patient data in sufficient detail (how did they fare after treatment? what drugs were they given?) to undertake a study.
Blame the advertising-driven revenue model.

Human attention is the only currency the advertisers respect and are willing to convert into dollars. Facebook, Instagram and Snapchat command attention. So do online forums like this one. So do [to a lesser extent] televised sports and performances.

Local news is on the losing end of this battle.
Could you make your website not display a blank page if the browser has Javascript disabled?

The content does not seem dynamic, so a simple HTML page should work.
I think it's fair to say that regardless of the historical precedent, the way we measure unemployment now is not representative of the situation out there.

Huge numbers of people are chronically underemployed, and an unprecedented number of people have simply given up finding work, neither of which is reflected in the top line "historically low unemployment."
Sandstorm does additionally protect people (and you) from your business model changing, "self hosting" is a pipedream for most people without sandstorm.

I think journaling is an ok word for what its worth. You might add some actions that people can do with it however ie "you can replay and review any changes". Its a great feature its a question of lighting up their brain the right way.
Censorship in Bavaria around failed tracheal implants
"6. Yes, we allow P2P traffic. We have optimized a number of our servers specifically for file-sharing; ensuring other servers, which are meant for streaming and other purposes, have uninterrupted speeds. In any case, we do not engage in bandwidth throttling for P2P users."

- https://torrentfreak.com/vpn-services-anonymous-review-2017-...
Project to combine graphdb and machine learning
I want to make a project that acts as a framework for combining graphdb and machine learning and makes it easier for users to just design a system using them with pluggable component.
I have tried to document idea here https://github.com/ArBrain/abrain

I think it will be very beneficial to the project if some experts can validate the idea and you guys can give some guidance.
The amount of problem denial in the line of "experienced C programmers make no mistakes" or "what? Memory safe languages can avoid only maybe half or so of security bugs, totally not worth it" is astonishing. Granted, it's not easy right now (sometimes close to impossible) for some types of projects to not use C but defending the obvious [1] flaws of the language is mind blowing.

[1] Pretty obvious from the beginning. The creators of C made a pragmatic choice and created a language which basically does not guarantee anything. This allowed them to write a compiler fast enough for the limited computing power they had at hand.

//edit: Also "C is great because I like programming in C" does not help here. If you like C nobody says you shouldn't ever use it anymore but you should be aware of the problems it drags along and maybe consider sth. else for security critical code.
Surprising! In Bangalore, it's a matter of a day or two.
"fastest DOM rendering engines, delivering exceptional performance for initial renders as well as updates."

I read this every time new fw pops up. Usually those kind of claims are exceptionally exaggerated.
References:

Steve Keene, Debunking Economics. Ignore everything but the actual arguments.

Richard Thaler, Misbehaving.
Uber’s first diversity report is not the worst thing ever
I doubt you'd be running Curl on that microcontroller.
Every one does not start with a blank slate, that is a luxury Tesla has as an upstart. GM is "saved" to save jobs by US government. GM has paid back, but its operational reality depends on selling "profit-making" vehicles, which are SUVs and Trucks, pair it with cheap gas prices, there is a strategy for GM to be profitable.

Tesla on the other hand, lives and dies by its EV performance, and their approach to the market at higher end kept them alive along with loans from US with few strings attached (for various reasons).

Tesla did not "break through" any thing. If any thing, existence of BoltEV and Volt does demonstrate couple of things, a legacy car company when there are profits are going to turn on dime and make shit ton of EVs, if that is what market wants.

Tesla has brand recognition behind it, but again as some one pointed out when the market for EVs in high demand and profitable, from BMW to GM, you will have them roll EVs in millions.
>Is it friendly to women? An engineering team with no women is a huge red flag of bad management and culture, for teams of more than about 5 people. For smaller teams, is there a sense that hiring women is important?

Personally, I'd rather a team that hires based on meritocracy than gender.
A floating, traveling makerspace
Actually, at the moment, its not really possible to create a bank account without visiting the country.
Yeah, that was lazy on the author's part and probably wrong.