skysight-inc/HackerNews huggingface dataset:
We're seeing these new security bugs because the abuse of portability wiggle-room as a corner to intentionally cut is changing the meaning that a human is trying to convey in a logical statement.

I still assert that at the very least if logical operations are eliminated they should be verbosely enumerated in the output of the compiler.

It might also be nice if there were a way of marking a section as /security/ rather than /speed/ critical, and thus transformations on the highlighted section would be far more limited.
A Conversation with Anders Hejlsberg (2003)
I use Tahoe-LAFS for all of my distributed FS stuff, and I really do love it. One minor downside is that the introducer server is a SPOF, but they can be backed up/spun up and distributed introducers are on the roadmap for the next year.
I'm guessing if you used a popular web-based email service, or any browser email client, then this would be possible.
Who cares about delivery fees? it's the total cost that matters.
It's really not that good paying of a job. True, gross costs are over 100-200K, but the wage net of maintenance, insurance and food is under 50K.

If I'm wrong, I'd love to be corrected.
It might have been some security guard thing, I don't remember. It was a few years ago.
I'm also kinda curious why the author didn't run through a simple spell checker before posting. I'm grateful for the article, it was an interesting read, but really why not just paste into google docs real quick or something?
What tools do you use for analyzing your web app (apart from Google Analytics)?
What tools do you use for analyzing your web app (apart from Google Analytics)? Particularly, I am interested in frequency use of the website by certain users, events triggers, conversation path and its sources.
I deleted Quora after i got emailed an article offering advice for how to date white women if you're an Asian man.
If I attempt to generalize it, I think most of C#'s differences in language design that have opposites in Java are superior. Examples include:

+ not virtual by default (so base classes can be changed more easily without breaking/recompiling downstream clients that the base class writer doesn't know about; specifying something as "virtual" should be a deliberate conscious decision by the class author)

+ value types (for speed, because J Gosling's idea that "_everything_ is an object is 'simpler' for programmers" has a cost -- the boxing & unboxing, and inefficient cache-unfriendly pointer-chasing containers)

+ no checked exceptions (checked exceptions have benefits in theory but real-world practice shows that it forces programmers to copy-paste mindless boilerplate to satisfy the checked-constraint)

+ unsigned types (very handy for P/Invoke API boundaries because legacy Win32 has unsigned params everywhere; yes, yes, Gosling said that unsigned types are confusing and dangerous but nevertheless, they are still very useful)

+ many other examples

This doesn't mean that Anders Hejlsberg's C# language team was smarter than J Gosling's Java team. They simply had 7 years to observe how Java programmers (mis)used the language and therefore, could correct some design mistakes.

Nevertheless, C# still made some dubious decisions such as renaming "finalizers" to "destructors". Java had the better name and C# should have kept the original terminology.
Kudos to the author, and hopefully they don't get sued as a result. This bullshit with corporations trying to cover up security vulnerabilities (rather than fix them) needs to stop.

"Sign this NDA or we will send the FBI to arrest you because you found that our banking website's security was completely fucking broken and told us about it." Jesus fucking christ.
"Treat the underlying..." my God, man, you aren't suggesting we abandon bloodletting, are you?

Allopathy historically has been composed mostly of palliatives that exacerbate the underlying condition. (Medicines that actually exacerbate the condition they seem to treat are incredibly profitable over long periods, of course.) France finally had to forcibly close bloodletting schools of medicine, going into shock due to bloodletting was such an effective palliative, medical practioners (and their patients) just weren't going to give it up.
"This is just like a Keruig, of course this will eventually work out, look how much money they are making on coffee!"

Yes, but coffee is filled with caffeine, a very addictive drug, and juice is not. Look at herbal cigarettes, how many people smoke those daily? If you want these DRM thingys to work, make them actually addictive.
You are asking for the impossible. It is not generally possible for the compiler to detect whether undefined behaviour can occur.

Take a function that returns the square of a signed integer: As long as it's called with arguments that are small enough, the behaviour is perfectly defined. But the compiler cannot necessarily know which values might get passed to it at runtime.

Now, it could in principle add runtime checks that do something defined, like abort the program, when the preconditions for defined behaviour are not met--but that often makes the generated code slow.

That is why the standard says that the compiler can do anything it wants in the case of undefined behaviour: It's just a different way of saying that it's the responsibility of the programmer to make sure that the preconditions for defined behaviour are never violated, so the compiler can generate code based on the assumption that that is the case, instead of littering the code with tons of overhead for the case that the programmer did something wrong.

Compilers don't detect undefined behaviour and then use those detected instances of UB in order to mess up your software, they simply operate on the assumption that there is no UB in your code--which means that the code they generate is correct if there is indeed no UB, but there are no guarantees as to what happens if you don't hold up your implicit promise to not invoke UB.
Why did the author post in 2017, so long after? He said in early conversations he was going to go public much sooner.
I'm pretty sure that if you try to buy a two dollar tube of toothpaste with a two dollar speck of gold, they'll say no thanks.
Ask HN: Computer science is too cold
I feel like the community around software, systems and computer science is too cold. It's without any feelings; cold, logic driven. Shouldn't be the developer and the user be the main focus of all our work?
This is a topic I have picked up some months ago. I am also a very logical person, coding cool stuff and studying new things. One day it hit me when a friend of mine, coming from the arts, explained how much difference there is between the two fields. "Computer science is just cold. In art you put the human feelings in your work and connect with other people over these feelings. I have never seen this in your day life!".

It struck me, because I suddenly knew what I was missing all these years since entering the industry. You might say, "but exchanging over solutions is a very social activity!". Or even that the open source community goes deeper and forms friendships. But I did not see it in university and even less in the business world.

Am I the problem, giving this seems to have hit a weak point I just recently discovered? Or do you guys feel the same? Would you like to exchange more over personal feelings, talk about more than code snippets?

Maybe this is a general problem; rising isolation, competition and the increasing hardness in language we see over the web. I do NOT want to encourage any kind of safe spacing, but often problems exist and people are not aware it exists on a large scale.

Thanks for reading, I wish you all a nice weekend!
You just sound angry..
> but some of these cultural factors I think were pre existing and also help facilitate the pattern..

I would agree with this. Here is a Soviet cartoon based on a Russian folk fairy tale about smart and mighty wife rescuing her husband from king's prison:

https://www.youtube.com/watch?v=CnysHoprhsQ

Here is another version of this fairy tale:

http://www.eliterarysociety.com/tag/stavr-godinovich/
Submittable (YC S12) in Missoula, MT Is Hiring a Dir of Marketing
I think they appeal more to the bootstrappers than to the YC startup crowd - but I like everything from 37 signals.
> No one willing to work 40 hours a week

Quite often that's the problem. Particularly if we've built up a palace of perverse incentives that make it a better strategy to coast along on the byzantine web of social services that is effectively an inefficient Basic Income for people at the bottom of the pile, than it is to get a shitty job and make just enough money to lose all those benefits.

I can't really blame people that realize that that's the situation they face, though.
Alot of the Florida east coast has "sandbars" to the east of it. It's basically like a long vertical island. You have to be very wealthy to purchase a home here. These are the people who are the most threatened by hurricane and the like. Miami's sandbar consists exclusively of wealthy people.
Usually everyone is talking about how valuations are too high before it really tanks. Probably have a little while before it drops like a rock.
> Another issue is that my approach to software design has significantly changed. Where I would
previously do a lot of inheritance and explicit design patterns, I’m far more motivated toward
using composition, instead.

I picked up on this too; object-oriented design patterns have lost a lot of mindshare over the last ten to fifteen years. There was a time when it seemed like design patterns were taking over the world. We're still living with some of the monstrosities spawned during that era. I wonder if design patterns can ever be rehabilitated.
I don't really understand the question, but anybody can create a fork of Bitcoin anytime they want.

The controversy is over which fork gets to be called Bitcoin.
Show HN: Light-weight C++ library for Keras
PSA for those who use caddy's proxy "without" configuration item - it is broken in 0.10: https://github.com/mholt/caddy/issues/1604

This bit our app during testing.
I remember seeing them back in the day, and as a Swede I didn't really get it. I didn't really know what AT&T was, so it just seemed like a very odd link and out of touch with whatever page I just came from.

I also remember there were specific apps you could install on your machine that would show you ads, and supposedly you were paid money for having this installed and even more if you actually clicked the ads. Roboclickers became a thing. I never used these, so I don't know if you actually could earn money this way, but I remember seeing them installed on various public computers like in school and the library.

I miss the 90s internet. So many things sucked so bad, but so many things were really good. I made lasting friendships with people over IRC. Sending files via FTP seemed like magic, and you could telnet into all sorts of interesting places. Geocities and web rings, I loved this so much – everybody had a site of their own! There was so much potential and it felt like every day you discovered something new, just by browsing around.

I remember when blogs became a new thing, in the 00s at some point I think, and everyone and their mom started blogging. I didn't like this very much. So much content was terrible, and mostly meta-content about how to set up your blogs. No one talked best practices when it came to Geocities – it was just good fun – but with blogs it all of a sudden turned so professional for lack of a better term, and boring. At some point as well, you had to start registering accounts everywhere – it was super annoying.

The internet is growing up, and it's probably better off for it, but I do miss the naïveté and optimism of the 90s sometimes.
Lessons Learned About Age, Wisdom and the Industry After Joined Airbnb at 52
ON ERROR RESUME NEXT
Theranos Secretly Bought Outside Lab Gear, Ran Fake Tests: Court Filings
That's exactly my point. The alternative is to either throw all ethical rules out of the window or to never experiment with any living being for any reason whatsoever. What we have right now strikes a good balance between the two, at least the way I see it.
I'm guessing he meant a webmail client.
For one, too frequent transfusions results in toxic excess levels of iron in the body, as humans cannot actively remove excess iron. This occurs in people with thalassemia treated with blood transfusions.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3968466/
Tesla's Musk Paid at Least $593M in Income Taxes in 2016
> I see people on Reddit saying they'll leave to [X] if [Y] will no longer work

Every major change ever made in any system brings out those comments. Whether the change is good or bad, successful or not, is not related to the existence of those comments.

Just look through Bugzilla; you can find those comments in (it seems) any change that attracts public attention.
Intentional UI glitching in web design
The Associated Press is a joint media venture. Maybe Twitter should be too
Agreed. Personally I think asking for general blog recommendations is not helpful. I just google topics I'm interested and start to create that list myself.

Also - I think the idea of creating blog followers is becoming less popular. I use aggregators like this to help collect the content and I can filter on my own.
lol even the google cache is being hugged to death https://webcache.googleusercontent.com/search?q=cache:h_l9j_...
Possibly, but you'd still have to (try to) "render" it in your browser by opening the mail.

On a similar note, your web mail could fetch images in emails ahead of time, but that would still be out of your browser's context
Hi HackerNews - Smallchat dev here.

There are a lot of great chat platforms out there. Smallchat is different in one way: we built it for the little guys. The freelancer. The local business. The small team launching a side project.

That means Smallchat has a free tier with no limits on the number of visitors, conversations, contacts, or operators. Your bill shouldn't go up if your site gets a wave of traffic or a new member joins your team.

We use Slack's new threads feature to keep all your conversations in one channel, so Smallchat doesn’t clutter up your Slack team with a bunch of new channels.

Smallchat's just getting started, so leave a comment if you have any feedback or advice on what features should be highest priority on our roadmap.
So is it unfair when someone uses a coupon they found in a flyer? They're not paying the same price for the same item as someone without a coupon, and people using coupons are likely to be less affluent.

And what about student discounts? Is it unfair that students get better deals on Photoshop and Microsoft Office?
Even if that claim wasn't wrong, it's an unrelated question. If there were rate-limiting problems, they'd apply to using EC2 at all even without involving containers.
Proxy-server performance is fine.

File-serving performance — not so good.
Email yourself a Web page with just one click
I share some of your observations but I disagree with your implication that these people are poor primarily because they are lazy.

The alternative is that they lack motivation because their lives are exhausting and debilitating. Maybe that sounds paradoxical, but there are at least a handful of studies (with a quick Googling, e.g. [0] [1]) which suggest being poor is a massive stressor that has an impact on mental and physical health. When someone has no money and no clear path for advancement in life, it's not hard to see why they might want to escape with games or movies or drugs. That won't make their long term situation better, but its something small they can control and feel good about in an otherwise bleak and chaotic world.

It's also the case that people who've experienced success from working hard will have more motivation than those who haven't succeeded. To the latter group, the formula for success is theoretical rather than a lived experience--they haven't had positive reinforcement for past efforts so they're less motivated to try again in the future, even if that's suboptimal in their abstract model of the world.

So ultimately, yes, a lot of poverty is the result of bad decisions, but that's an incomplete picture of the death spiral of poverty where a lack of money and options creates a mindset that encourages those decisions.

[0] https://www.psychologytoday.com/blog/am-i-right/201210/the-e...

[1] http://www.urban.org/urban-wire/povertys-toll-mental-health
The claim is that it's impossible to avoid UB in real world C, but not impossible in real world $SAFERLANGUAGE, with Ada as an example. Any language that allows you to poke around in memory (a feature you need for embedded systems) will contain unsafe constructs. The question is whether you can tell by looking whether a particular piece of code is safe or not.
I like CamelCamelCamel, personally.
They've also spanoff Intel Security back into McAffee as a separate company which Intel only has a stake in.

Intel seems to be going back to being a hardware only company.
Ask HN: How much do companies really pay for plaid?
The pricing page (https://plaid.com/pricing/) gives a vague starting idea, but I'm curious to know (from any HNers who have first-hand experience) what growing startups (e.g. Robinhood) are paying to use Plaid.
so why did python and ruby became popular

and why isnt dart more popular
Note that the parser is off by default unless on nighty or aurora, and even in those cases it will run both rust-url and the regular parser to figure out what differences exist.

https://news.ycombinator.com/item?id=14167305

In nightly currently IPV6 urls are unconditionally serialized with rust code, and this will ride the trains to a release without being turned off.
Graphy – minimalistic framework for GraphQL [WIP]
You don't have to imagine. Go look at the US foreign policy from 1945-1948. There were several instances where the threat was made.
Sediment carrying capacity in water is affected by current speed. Even a slow moving river slows down when it hits the ocean. Then the sediment it is carrying settles out to the bottom.

Over time this creates an underwater mound that acts like a barrier to the current. So it deflects to one side or the other (or both). Then the sediment builds up in that new location until the current deflects again.

Over time this builds up a fan-shaped extension of the shoreline called a delta. The river might flow out through any number of channels through the delta, and it might change often.

The bigger the river, the bigger the delta. The Mississippi has a huge one... which New Orleans sits on top of.
>To use your analogy of raising a sign: if you don't put up a 'no trespassing' sign then it doesn't make trespassing legal.

Right. And it's actually not a bad analogy as analogies go. Not having a sign doesn't make trespassing legal but if someone sometimes walks over a corner of your property and you go to the police to try to get him arrested, the first thing they'll probably ask you is if you have your property posted and/or if you bothered to ask him to stop. If the answer is no, they'll probably tell you to go away and do so and only come back if he ignores the sign.
Rust yes, Go just has Google.
He was afraid that he was bound by the NDA not to disclose it.

Now, in 2017, he flouts the NDA and acts in the public interest.
It's too bad, since being a "standard" has helped CL to grow so much, despite some warts that the language inherited from old times habits.

Without a standard, it seems most efforts to build a new Lisp come to a naught (think Racket and Clojure and Arc and ...)
It's a Dutch court.
this is right. posix for posix sake shouldn't really be relevant anymore. look at the success of write-once s3. posix semantics were designed to address issues of concurrent access to the same bytes.

also, the only standard distributed protocol for posix, nfs, has always had a lot of design and implementation issues. v4 is complex and tries to address some of the consistency issues, but I don't know how successful it is in practice given the limited usage.

treating blobs as immutable addressable objects and using other systems for coordination avoids a lot of the pain with caching, consistency, metadata performance, etc. you can layer those things...its a good cut for large scale distributed systems
I believe the idea is nobody would willingly sign a contract that does nothing to benefit themselves so they must have been mislead into the agreement thus it is invalid. Sort of a rational actor theory of law.
On a similar, but separate note, my bank launched a new version of its online banking platform. From launch I noticed it opened my accounts in a new tab while leaving my credentials (password and all) in the sign-in form. Not so bad when signing in from home - horrific if you're signing in from a public computer. I tweeted to the bank and spoke to someone on the phone about it. It's been 3 months and the bug is still there.

[EDIT]
I decided to log in today just to see if it's still there (was a couple days ago), and it's finally been patched. If I had used a throwaway I would gladly let you guys know the bank, but I won't since it's trivial to find out who I am from my handle.
I agree with everything you wrote here. In your original post it sounded like maybe what you were saying was that the airline should have used peer pressure as a means to violate their contract with a passenger. There are much better choices available than "beat him up"and "idling a whole plane on the tarmac for a few hours." - both of these are very bad choices. In the case of United, simply coming on board and saying a screwup happened and saying you are authorized to give 4 free round trip first class tickets on any destination where United flys would have quickly gotten more than enough volunteers.
It all depends on how complex your setup is. Caddy isn't just easy to setup, it is easy to setup every part of it until you reach the end of its functionality.

I can set up both nginx and apache (and get paid for it), I've automated LE for new sites via ansible, etc. Nowadays if I can do with caddy, I just use that and proceed to the next task.
Also remember that easy (and short) configuration means easier maintenance.

Devs also love it, they can develop locally using advanced functionality (e.g proxying an API that doesn't provide CORS).
There is a trend that the second and subsequent revisions of ANSI and ISO languages tend to increasingly suffer from major "second system effects".*

Instead of just standardizing what is out there, the committees become self-serving; they keep meeting just for the sake of keeping the committee going, and begin inventing things for others to implement.

That X3J13 got the job done and then dissolved is very, very respectable.

---

* https://en.wikipedia.org/wiki/Second-system_effect
BeeGFS is great. I originally evaluated it when it was FhGFS and am still involved with a large production BeeGFS cluster deployment.

Any knucklehead can install it and it works transparently with excellent performance. It's currently not enterprise-grade fault tolerant - that's the worst thing I can say about it.
Show HN: I built a tool to quickly remove debugging statements from your code