skysight-inc/HackerNews huggingface dataset:
I have no problem with Curl being written in C (I'll take battle-tested C over experimental Rust) but this point seemed odd to me:

>C is not the primary reason for our past vulnerabilities

>There. The simple fact is that most of our past vulnerabilities happened because of logical mistakes in the code. Logical mistakes that aren’t really language bound and they would not be fixed simply by changing language.

So I looked at https://curl.haxx.se/docs/security.html

#61 -> uninitialized random : libcurl's (new) internal function that returns a good 32bit random value was implemented poorly and overwrote the pointer instead of writing the value into the buffer the pointer pointed to.

#60 -> printf floating point buffer overflow

#57 -> cookie injection for other servers : The issue pertains to the function that loads cookies into memory, which reads the specified file into a fixed-size buffer in a line-by-line manner using the fgets() function. If an invocation of fgets() cannot read the whole line into the destination buffer due to it being too small, it truncates the output

This one is arguably not really a failure of C itself, but I'd argue that Rust encourages a more robust error handling through its Options and Results when C tends to abuse "-1" and NULL return types that need careful checking and can't usually be enforced by the compiler.

#55 -> OOB write via unchecked multiplication

Rust has checked multiplication enabled by default in debug builds, and regardless of that the OOB wouldn't be possible.

#54 -> Double free in curl_maprintf

#53 -> Double free in krb5 code

#52 -> glob parser write/read out of bound

And I'll stop here, so far 7 out of 11 vulnerabilities would probably have been avoided with a safer language. Looks like the vast majority of these issues wouldn't have been possible in safe Rust.
Sardinia isn't a tropical locale by a long shot
Peakon secures $6.5M for its SaaS platform for employee engagement
Italy isn't tropical.
Securities exchanges usually have settlement as a distinct step from trading. Blockchains as title make settlement faster, easier, and less expensive.
A government cryptocurrency could be built on a blockchain, but there is really little point. Some properties that it would need are:

* It's backed by usual pounds by the treasury, which means only they get to issue new coins (no public mining rewards).

* Court judgements must be able to block, reverse or force transactions. This means either the government gets a copy of all private keys, or simply has master keys for the system.

* UK government would probably want to attach names to all accounts, so new wallets could probably be only generated on some gov.uk site, or participating businesses like existing banks.

In the end, the blockchain is wasteful and inefficient when you could just have a big-ass server somewhere with an API.
OP did get an email. It's mentioned on line 4 of the post!
Some would say those two are linked.
Why not? Deactivation and reactivation is a very rare activity that warrants secondary authorization. A simple confirmation email does the trick most of the time.
Red Hat's Ravello Systems user credentials leak
The novelty of being "the guy that rewrote libcurl, but in Rust!".

Probably.
Yes, is this a joke? You need a microservices to offer pet insurance?

Pretty sure you could do it with a new view and an if statement in any MVC every built...
Another reason: C is beautiful.
Automatic code splitting, routing and client-side rendering are necessities to provide websites that don't require a full screen repaint and server request to change small stuff. When well-executed, it provides a better experience to the average user.

Hot code reloading is a way to test changes without dropping current state, something that's extremely handy during development to avoid wasting time replicating said state every time.

Does the tooling suck donkey ass? Yes. Does it have serious tradeoffs to consider? Yes. But in many cases it's the right thing to do to have a higher-quality product.
So much this. I am genuinely concerned about the direction of discourse and society in general with the way mass communication on the Internet has played out. Just look at how the damn president of the US communicates in tweets - short, authoritative and usually inflammatory. After that, all other conversation is drowned out by Twitter rolling responses in to another view.

The build up of these echo chambers and extremely brief communication patterns contributes greatly to polarizing people on all kinds of different issues. It's really terrifying to me.
Top 5 Xamarin Mobile App Development Companies
This is kind of their problem. I am not worth $500 as an advertising prospect on Google. If you come in with a way for advertisers to pre-qualify their prospects, they'll want to do business with you. We know we are throwing our money away with Google but they are the only game in town.

However, I am in a thread now with with matt4077 who says google is his best online lead generator, so there are obviously things to learn.
Yeah, a related and very funny satire of this truth was the old SNL skit on sexual harassment. http://www.nbc.com/saturday-night-live/video/sexual-harassme...
-ENOQUESTION
> generate C code.

how is that different from just writing it in another language? End users who need to compile will be able to regardless of the generated C code, but the end users who need to do a _little_ modification will be given ugly generated C code! Seems stictly worse to me...
>Deep down, psychologists suggest, impostors appeal to us because we suspect that we are all, to some degree, faking it.

No, I've never had this fear.
I think you underestimate the human ability to forget. Lots of people will decide to close their facebook account without thinking through the consequences (like that they used it to authenticate a dozen places).
I'd say more specifically - things that need explaining are created slower than blogs explaining them. The are still great writeups about many things, but unless you're writing about new web frameworks, it's just not that easy to find a topic in a popular development area.

Of course you can still post about something you learned and bring some new traffic, because you explain it in an accessible way. Or you may write about something on a company blog. But if your aim is to create new, unique tech content, the chances are there's already another blog post, 2 SO answers, and a few relevant mailing list posts on the topic. We're constantly accumulating tech knowledge and mostly we're running into the same problems.
Can't RFID chips to be copied though?
The video and stills are things that I shot, most geotagged and datestamped. The video is frequently, uhh, sensitive.

What am I to do? Networks simply aren't fast enough to deal with my data sizes.
Anything that makes you a strong fit or that makes you really like the position. Even if you don't have much to say, anything that makes your application not look like spam, and spamming out a resume is exactly what the author of this article is doing, is a good start.

"I wrote one of the open source packages you use!"

"You make software used in my toaster!"

"Your office it two blocks from my house!"
To echo others in this thread, the same happened to me. The account was deactivated in 2009, and I used a password that I know to have been compromised in hacks of other services.

After several weeks, I got an email yesterday telling me that due to no further suspicious activity, they unlocked the account without Photo ID verification. I went in and scheduled the account for deletion.
So you're suggesting more indoctrination and the abolition of states aka. conquest and colonialism?

Because the way we're going, there's going to be another world war long before people willingly succumb to a global state...
> a high security feature is built into the coin to protect it from counterfeiting in the future.

Reminds me of the Indian Rupee 2000 'gps feature'
> Which leads me to wonder - how do counterfeiters insert their fake coins in the monetary system? Where can you spend a lot of coin without arousing suspicion?)

There are plenty of corner shops that'll happily sell you duty free tobacco amongst other non-legal things. I'm sure they'd be happy to take £100 worth of fake coins and mix them into their tills/takings/change if it only costs them £40. The difference can go into their pocket.
The societal cost of counterfeiting goes far beyond the nominal value of the fake coins in circulation (approximately one in thirty one pound coins is a counterfeit).
A Closer Look at Sorting Algorithms
Internet of Things UK National Database Launch
USA "proles" fell for populism and elected the worst neocapitalist team possible, against their own interests, that's what we're talking about when we talk about "populism".

By and large people (demographically) who voted for the democrats won't be much affected by the GOP gov, but the people who voted for the GOP will be badly affected.

If a mod comes here, I vote for closing this post, I feel it is very very prone to political flame wars.
Yes, this is a payphone...

...don't ask.
If you're on an Android, here's a great open-source client:

https://f-droid.org/repository/browse/?fdfilter=droidfish&fd...

https://play.google.com/store/apps/details?id=org.petero.dro...
NLP,DM – General Architecture for Text Engineering (University of Sheffield)
And a some of them are even just rebranded OEM products - e.g. their long-life rechargeable NiMHs are actual eneloops with different labels.
I intend to use this platform to build my own text parser (in a product). Some queries:

1. How robust it is?
2. I have written my code in C#, and to migrate it to GATE I have to write all code in GATE Developer from scratch using JAPE. Is there a way to speed up this migration?

Thanks
There's no lack of education that makes people accept other people that don't share your values (like secularism) and are against what you stand for.

Unless by "education" you mean brainwashing, which is something totalitarian states excel at (horseshoe theory and all)
Interesting, I wonder if it's like the EMV credit cards. I wonder if this stuff is standardized, are the ID and credit card chips the same? Having the same readers would be useful, especially if all countries started doing that. Would be a little insane to have like a tower of card readers at like airports. "Oh your from America use the one in the middle" "Your from Canada use the one at the bottom."

If the same hardware, then I guess the only different would be that the public keys would be associated with somthing else. But it's probably a huge patent mess to make this a standard for all countries and states.

I know two stores in my area that don't even support chip cards and this was within going in the past year. One has the readers, but they don't work. The other has no chip readers at all.

I always thought paper signing was a bit outdated, especially since schools don't teach cursive really. We spent like a hour on it, and then next topic!

But then if someone stole your ID, lost it, etc... They could sign for things... but people can forge your signature anyways... Maybe if the machine had a camera in it to take a selfie when you use the card, but a bit creepy in a way to.
Ziggo also replaced their in house streaming service with Netflix directly on the cable boxes because there was no chance of them being able to compete. I believe Liberty Global (the worlds largest cable company and owners of Ziggo) is planning to do the same across Europe.
I applaud everyone using such deep testing!
I was in Norway last summer. They had a number of phone booths standing around. They don't work, but they have some signs that they are under some kind of cultural heritage protection or something alike. I found that kinda nice.
Comparison of ASCIIMathML, PHPMathPublisher, MathJax, KaTeX, MathTeX

http://www.intmath.com/blog/mathematics/comparison-math-web-...
oh, that similar project repo seems to be the inspiration/genesis of this thread's repo.

Also that repo's author did the Stanford lecture comparing theano, tensorflow, torch which is very worth digging out of the various archives
I think that Netflix (and Amazon) is trying to create enough content that you don't need anyone else. That would certainly justify their spending, and give them tremendous leverage against the other players.
looked interesting, shame it's paywalled
Unifying Theories of Programming by Tony Hoare Et Al
not sure if you are overvaluing hollywoods influence to create a positive image about the U.S. or i am just not the target audience.
A linguist on Arrival's alien language (2016)
Ideas like this sound sensible on the surface, but they have unfortunate side effects.

For example if politicians must disclose a lot of private information, only those who don't care about that will become politicians. And then since they are comfortable with it, they won't see any reason to control dissemination of others' private info.

(BTW I'm not criticizing you by saying this; I don't know a good fix).

But you know how everyone gets a blast of schadenfreude when that anti-drink-driving politician is pulled over for driving dangerously after having a few too many? Of course I laugh too, but I wonder if they have been so vocal about the issue because they know how dangerous it is. Whereas I, who drink little and don't even like to drive, probably wouldn't pay much attention to the issue if I became a politician.
People bother checking their coins at all?
Uber grounds its self-driving cars as it tries to fix itself
Back then, it was capped at $30,and unless you are in the top 10-20 players, you can get by with a lot less.

In any case, the pricing model has changed and it is $9/month flat rate, so that concern is obsolete now.
this sort of doom-saying and cherry-picking of statistics to derive a narrative is in itself harmful, as the economy is almost entirely based on consumer demand and confidence

brexit itself doesn't change the fact there's a short term business cycle driven by credit and low interest rates

> At the moments large parts of the handling of the UK economy appears to be based on trying to push problems ahead of us in the hope that things will start looking rosier some day.

capitalism is based entirely on eternal exponential growth, which is clearly not sustainable, there's nothing UK specific about this
I often follow up with "I don't know anything about that, can you tell me more?"
300 Billionaires are also immigrants
This is the same argument left academics have been using to excuse the repeated failure of electorates to vote for socialism for a century.

It's not a new argument. And it nicely avoids left wing thought ever having to take responsibility for its own electoral failures.
Why are you saying this? Who asked? I always imagined it was written in C.
The difference is that you don't need compiler for this language. There are many hardware platforms that only come with C compiler.
Next looks very interesting and feels very much like the PHP of old where stuff just works with sane defaults. Very cool stuff.

My one criticism of this is: Component CSS is cancer. I've worked on a large scale javascript project and it was riddled with duplicated CSS in every component, all in the name of being conflict-free.

You know what I call that? Not knowing how to scope your styles properly with something like BEM. http://getbem.com/
Or running Windows Vista you can right click and display a menu in one second plus about 29 other seconds.
I've liked some of netflix's original content - house of cards was the first - but a LOT of it is trash too. I don't doubt they have numbers that lead them to create these shows... but i question the scale of it sometimes. Of the netflix originals, i've only enjoyed a handful.

Meanwhile, I've enjoyed a number of "low-budget" shows they've had (like ice pilots) and a number of the kung-fu movies they have available. But to be fair, a LOT of the low-budget stuff they have is trash too.

It's clear (to me) that there is some effort to pad their content, to seem like they have a fuller collection, even if it's only a collection a raccoon would love. This, taken with the idea they tote of "having only the best performing people" displays a mismatch in cultural ideas and actual output.

For me, I want netflix to succeed because another content producer is a welcome addition to the scene, and i hope they stay independent and don't get bought up by disney. I know in a few years they'll have a collection of original content to rival the older players.
Obvious solution to your problem: write your own js component library. And don't forget to submit it to the HN crowd when you're done, you should get a very positive feedback.
Watch the video and you will understand that/why google chooses sync. development.

As to why it's important, you will see eventually, or you can try to figure it out by reading the link again in a couple of months. The brain needs time to understand things that are hidden by self preservation, like how money is created f.ex.
Magento API Steps to create web service in Magento 1.9
Are you an "electric universe" believer?

Black holes by definition can't emit EM radiation, so their only way to emit energy (ignoring hawking radiation which is tiny) is through gravitational waves. Due to the conservation of momentum, to be ejected from the core must be a result of some amount of momentum in the opposite direction.
Not only is curl based on C, but so are operating systems, IP stacks and network software, drivers, databases, Unix userland tools, web servers, mail servers, parts of web browsers and other network clients, language runtimes and libs of higher-level languages, compilers and almost all other infrastructure software we use daily.

I know there's a sentiment here on HN against C (as evidenced by bitter comments whenever a new project dares to choose C) but I wish there'd be a more constructive approach, acknowledging the issue isn't so much new software but the large collection of existing (mostly F/OSS) software not going to be rewritten in eg. Rust or some (lets face it) esoteric/niche FP language. Even for new projects, the choice of programming language isn't clear at all if you value integration and maintainability aspects.
Dell XPS 13, 9360. Can ship with Linux preinstalled, and you can of course install your distribution of choice. I run Debian unstable on it and use it as my main development machine. Works with the Display-Link USB 3.0 dell docking station (haven't tried the Type C Usb yet). Even supports dual-head. But you have to install the drivers from the display link homepage. It is not a beast when you need performance. At the office my boss provides me a Dell XPS 15, with i7, 16gig and nvidia graphics card, works with the docking station too.
I'll post you one if you like.
I'm pretty sure that would quickly get them in trouble because of copyright issues...
Watching the video - I was waiting for John Ive voice at the end saying "it's the best coin we've ever made"
This would be less an issue if Facebook would forthrightly handle account deletion.

As it is now it's simply not possible for a regular person to decide that they do not wish to further participate with any of facebook's services, remove their account and all the data associated with it, and be confident that all of the data collection, analysis, and 3rd party identification/authorization that goes on with active facebook accounts stops when their account removal process is complete.

So no matter what any one individual does in regards to their unwanted facebook account there is always the possibility that something they would really prefer not to happen with it comes to be... like some hacker from who knows where gaining control of it and so adding another key element to their identity fraud dosier collection.
Using TensorFlow to Compose Music Like the One of Bach or the Beatles
Honestly this is a terrible article. I don't know why these "journalists" have such a hard time stepping out of their bubble. Ask a trump supporter it's great for me but it blows my mind how ignorant these cosmopolitans are. I just hope they keep their head in the sand so we can get another 4 years
One of the screen-shots looks like Flappy bird:

http://octalyzer.com/wp-content/uploads/2017/02/oct16.png
What is the most productive programming language other than Ruby?
If you don't want to use React there's no point in using this framework. You can use other frameworks, the superpower of this one is the React integration.
There are other solutions out there: polymer, skatejs, x-tags, vue, angular, aurelia. Some of them are more interoperable with others and can be use in multiple projects using different frameworks - I'd like this to be the norm.
I got rid of sky last year. I was paying a multiple of what netflix costs and had to put up with what seemed like 5 minutes of ads for every 10 minutes of a show. It made GOT completely unwatchable.

I am under no illusions about how netflix might behave if they ever achieve a monolithic dominance but so far it's great.
Containing 1 pound of silver in it? No, so it's fake.
The system exists. If it can't do that, it has no purpose.
as was part of the comment, unless "needed". Otherwise I've fallen into the trap of breaking out the most precise notation from the depths of the annals of mathematics to write slick looking, ultra concise pseudocode in latex (algorithm2e) for submissions to ieee and acm journals, and almost every time i get one or two reviewers saying that the notation is needlessly complex.
> Of course that leaves a share of problems that could’ve been avoided if we used another language. Buffer overflows, double frees and out of boundary reads etc, but the bulk of our security problems has not happened due to curl being written in C.

He addressed all of those points in the second short paragraph. None of those are C vulnerabilities, they were mistakes made on the part of the developers, not the language. Avoidance of problems in a safer language doesn't mean when things happen, it's the language's fault.
I have to say I dislike that aspect of using React as well.
So many fine libraries (say https://github.com/dc-js/dc.js) that I now have to "make it work with React".
What is the difference between counterfeit and "original" coins? Unless they have 1 pound of silver in them they're all fake money.

I think everybody should just accept and use counterfeit coins, if they look like the coins issued by the central bank.
Nobody gives a damn about values. Otherwise the British nationalists wouldn't care about the Polish immigrant workers, but they do get a certain amount of hate.
> a sign a techie is getting "old".

Some of those "older" techies have gotten a wisdom that only comes with experience.
Show HN: Kwery – Schedule, view and email reports from datasources using SQL
See also: https://monique.io/
I completely disagree. After working with component CSS I vomit when I see any CSS not encapsulated to one single component. I don't want to change a global CSS declaration and accidentally change something completely different. You can always import the stuff you really want shared.
It doesn't parse my text files with "CREATE TABLE" declarations in them.
Public key encryption was actually first thought of at GCHQ - but was you would expect they kept it secret:

https://en.wikipedia.org/wiki/Public-key_cryptography#Classi...
I see Donald Trump and Brexit more as a protest against the status quo--which does not mean that the entire system is terrible. It could just mean that people want reforms that benefit the public good and not just some Senator's home state.