skysight-inc/HackerNews huggingface dataset:
They're a constant problem in all browsers. Take last year's Pwn2Own for example: http://blog.trendmicro.com/pwn2own-day-2-event-wrap/

Demonstrated a successful code execution attack against Safari to gain root privileges using an use-after-free vulnerability in Safari and an out-of-bounds vulnerability in Mac OS X.

Demonstrated a successful code execution attack against Microsoft Edge in the SYSTEM context using an uninitialized stack variable vulnerability in Microsoft Edge

Demonstrated a successful code execution vulnerability against Microsoft Edge in the SYSTEM context using an out-of-bounds vulnerability in Microsoft Edge and a buffer overflow vulnerability in the Kernel.

etc. Highlights mine. All of these are prevented in safe Rust.
"Tesla added that Vandermeyden had been granted numerous positions over other more qualified candidates and was given special treatment and opportunities for advancement that were unwarranted based on her qualifications”.

Its amazing to see a company so openly admit that it gives special treatment to some employees. Everyone suspects that to be the case but nobody says a thing. Maybe the rest of us should file lawsuits.
• has got their hands dirty writing technically complex systems, such as:
◦ a high-performance database/KV store
◦ an OS
◦ a programming language implementation
Please don't post unsubstantive comments like this here.

https://news.ycombinator.com/newsguidelines.html
00:00 to 06:30 but I wish I could sleep an extra hour. Zero dream recall these days.
Ask HN: Which productivity service do you use for personal projects?
As a current student, I have many projects which I work on for classes, hackathons, and internships. For these projects, I'm often working with one or two other students, and in the case of the many personal projects that I also work on, just myself. I often just need a place to track my own work on a project without any need for collaboration.

I currently manage these with Trello to keep track of them. While I like Trello, creating a card for a new feature doesn't satisfy me because checklists don't allow any additional information to be attached to them other than a line of text. A new board for each feature doesn't make much sense either because its overkill and hard to track with the rest of the app. For those reasons I dislike Trello and want to move to something else for my various small group projects and personal projects. However, I find that services like Asana, Flow, ProofHub, etc. are all geared towards organizations and teams (which don't work at all for my use case) and the pricing makes it impossible to purchase as an individual.

Todo lists like Todoist and Wunderlist are too basic and don't support the features that I need for programming projects (markdown, ability to handle code, documentation ability for tasks, GitHub commits) and they generally don't cater well do an application development workflow.

So my question is, with all of the more appropriate services (like Asana, etc.) being impossible to use as an individual, what do you use to manage your personal projects which don't fit an organization structure?
Not on the coding side, but the inspiration. . . For those of us in the USA, there is a much more accessible version of synchronous fireflies at Great Smoky Mountains National Park in Tennessee. I lived there for a few years and went multiple times[1].

The dates get announced a month or so beforehand, and tickets are based on a lottery system since it only[2] occurs on one side of one river for less than a mile. You can technically also hike in if you're ok with 8 or so miles near sunset and then the same amount out in the pitch black. I believe that is frowned upon, but very few people do it that way (I was the only one the year I couldn't get tickets and decided to hike).

[1] https://www.flickr.com/photos/23215983@N02/albums/7215764507...

[2] Not exactly only, but certainly the most strongly.
Releasing new version of Datacol(a self hosted PaaS on Google cloud)
Wow these are great. Is your background in EE then?
Well, the inverted scrotum we use right now is a better symbol of lust anyway.
If you are part of the cult-like group that dreams of a future Surface Phone, which includes myself, this is an interesting milestone. If such a device has been in the works in the past, Intel's cancellation of Morganfield (Broxton SoC for phones) was a huge set-back.

Microsoft pursuing x86 emulation on ARM, while certainly of interest to low-cost traditional form-factors such as laptops and tablets, is also interesting because it reinvigorates the idea of a Surface Phone. Of course, the reality remains to be seen.

For those unfamiliar, the concept that many of us imagine for a Surface Phone includes an evolution of today's Windows 10 Mobile Continuum feature that, as with Ubuntu Phones and some fringe Android devices, allows a phone to act as a full computer when docked to a keyboard, mouse, and display. While Continuum exists today on devices such as the Lumia 950 and HP Elite x3, it is limited to Windows' "Universal" applications, and does not work with x86 or even older Windows Phone applications. Still, the appeal of a single-device lifestyle is considerable and many people would love to simplify the technology in their life to a phone that is also their desktop/mobile computer. Many of the youngest generation already do this by simply conceding (willingly or unknowingly) they will never enjoy the advantages of computing with large monitors, keyboards, and mice.

In order for a single device to successfully fulfill these multiple roles, it needs to be able to run real applications and not just in a "enlarged phone OS" fashion seen on devices such as the iPad Pro.

If a Surface Phone were to materialize, I would expect Windows 10 Mobile and Windows 10 to become more converged than they are today. When using Continuum on a Lumia 950, Windows 10 Mobile is doing a respectable job of impersonating a Windows 10 desktop; but it's a veneer. For a Surface Phone to be a viable computer, I think it would start with Windows 10 (full version for ARM) and adapt downward to the phone form-factor, rather than today's opposite of a phone-tailored operating system adapting upward. Yes, W10 and W10M are very similar today, but a SP device would, I feel, push them closer together.

Of course, there is no genuine credible news on such as device, and Microsoft has dodged questions, even downplaying the likelihood of such a device. There seems to be a widespread opinion that one should not even try to build momentum in today's phone market, which I feel is shockingly myopic and pessimistic. Of course it's not a simple matter to establish a foothold in mobile, but previous efforts, while half-hearted at times were nevertheless making (slow) progress until Microsoft pulled the rug out from beneath Windows Phone 8. The biggest challenge to a Surface Phone would be bigger than technology: it would be a test of Microsoft's commitment to the idea.
I disagree. Public spending on research was far higher in 1950-today than from 1890-1950. And yet it seems technological progress was faster in the 1890-1950 period than afterward.
Show HN: Lomond, a new WebSocket client for Python
That is a good question. I imagine it depends on why it is a native module. If they are native module because it utilizing features at the OS or machine level, then I doubt they could.
My 35mi commute with no practical public transit options is a requirement.

But also, I have a child, not yet 3. If you're going to say that I shouldn't have a car in this scenario you're either single or uninvolved in the realities of having a child.

I understand that manufacturing batteries has negative externalities. I'd argue that removing myself from the carbon spraying game has immediate impact (we cannot stop ACC now, but we can temper its course), and that's good. Reducing the US's economic incentive to screw with the world's politics to maintain gas prices: also good.
OK you pronounce "Bejing" with a normal, regular, everyday hard 'j' sound as it's supposed to be pronounced (not some fake exotic sounding airy zzzhhhhhh sound you and everyone else just made up out of thin air) and I promise not to kill or pin any butterflies.

I really thought the peeve was going to be about pictures of butterflies on people's mouths (Silence of the Lambs). That bugs me, but I guess with the movie it was supposed to.
Ada has a rich set of language features to express preconditions, postconditions, and invariants directly in the code, and then have those logical statements available to the compiler so that it can assume certain facts about the program's execution when optimizing:

https://en.wikibooks.org/wiki/Ada_Programming/Contract_Based...

Also, the type system lets you specify legal values with more precision than the word-based types that most languages inherited from C. For example, you can have range types that may hold integers of only a certain range, and the compiler will enforce that when assigning to variables of the type, or throw an exception if an arithmetic operation results in a value outside the range (you also have modulus types that explicitly give the wraparound behavior familiar in C). Containers allow generic constraints, and you can explicitly specify the dimensions of array types.

https://en.wikibooks.org/wiki/Ada_Programming/Type_System
Actually, wouldn't it be like an ice cream guy named Melted?
its interesting how ars basically copy paste the press release, even thus they very well know how much bs is in it.

nobody cares about integrity anymore?
As am I. Maybe that's why I can't finish the last two volumes of Game of Thrones. What? He isn't dead? Then there must be another reason.
5 Side Hustle Ideas for Millennials to Start Making Money Now
Challenge: turn your design idea into a hi-fi prototype in one day
What about same 4k resolution and 27" instead?

Can you work with the MBP closed these days?
DStress: Efficient Differentially Private Computations on Distributed Data [pdf]
a) only 32bit
b) At what speed though? x86 emulation isn't trivial, and arm seems to be sufficiently different in architecture to incur a large translation overhead.
Could be talking about this[1]:

You have to curl your fingers gently as you walk in order to keep your attention on the trail and the surroundings. Your ordinary way of walking is debilitating and you should never carry anything in your hands. If things have to be carried one should use a knapsack or any sort of carrying net or shoulder bag. By forcing the hands into a specific position one is capable of greater stamina and greater awareness.

[1]: http://www.prismagems.com/castaneda/donjuan3.html

This site is where I read some of Castaneda's work for the first time. He doesn't just tell you how to walk, he tells you how to sleep, which side to go to sleep on, how to intend things and how to project your intent, how to set up dreaming, how to run like a warrior (sprinting in the dark), and a whole bunch of fun stuff like that. It's very easy reading, you can probably get through all of this stuff at least inside of a day or two if you don't have much to do.

I like the description as "it really happened! fiction" -- this is exactly what I think I felt when I was reading it.
Yep! Explicitly called out in the blogpost.
>To summarize, we’ve just made Plex an even more awesome choice for the aspiring cord-cutter

I think it's a pretty neat feature for people who still find it hard to get away from TV for reasons like the live channels (sports). They can still make use of DVR features and watch stuff on Plex like they don't even have a tv subscription. Except in this case they still get the big bill every month and lovely commercials.
doesn't UEFI resolve all that?
I've seen the geography argument brought up for a "Why no national insurance companies?" Apparently, network stuff is so localized that it's very hard to set up a national-level insurance company. Although I suspect state-by-state laws play into it as well.

At any rate, the sheer geographic size, plus the large population, plus the legalistic bizarreness of our federal/state divide, leads to a chaotic system, and we can't easily just legislate that away.
Putting out two fires simultaneously means fewer resources are spent on each individual one.

I could even fantasize about a scenario where Intel: "if you launch an ARM laptop we'll raise our prices" Microsoft: "fine, we will switch to AMD"
How We Used Microsoft’s Decision Service to Significantly Boost Conversion Rates
Interesting, but much more complex. I suppose it's more powerful as well as a reward. I've never had the need for such complexity though.
In my case, at least, living in NYC, I compare prices with what I pay for standard Yellow Cabs. Sometimes the Uber prices are not that much lower for routes that I know. In NYC, the Uber and Yellow Cab rates are almost the same. Compare that with Chicago which has far more reasonable rates. All of the inputs (car cost and operations, gas, labor of driver) is the same in NYC and Chicago, yet NYC is far, far more expensive for users.
Gett and Via (the later is a carpooler) has much better rates.

For the rates Uber charges in NYC (UberX)

Base Fare: $2.55. (NYC Yellow Cab - $2.50)
Per Minute: $0.35. (Yellow - $.50)
Per Mile: $1.75. (Yellow - $2.50)
Cancellation Fee: $5 (Yellow -- no cancellation)
Service Fees: $0
Minimum Fare: $8. (Yellow - no minimum)

Chicago: (Uber X)

Base Fare: $1.70
Per Minute: $0.20
Per Mile: $0.95
Cancellation Fee: $5
Service Fees: $1.40
Minimum Fare: $4.40
Show HN: My first Facebook game made with Unity
Location: Redmond, WA

Remote: Yes (have spent the last 6 years working remote)

Willing to relocate: No

Technologies: Python, C, Go, x86 Assembly, Linux, Hypervisors (Xen), Distributed Systems (check my resume for more)

Résumé: http://johannes.erdfelt.com/resume-hn.txt

Email: johannes@erdfelt.com

I've done work from low-level BIOS extensions, to Hypervisor development, to Linux kernel development, to Network Services (DNS, SMTP, DHCP, HTTP, TLS, etc) to high level distributed systems.

I've worked as the first engineer at a startup to large multi-national companies.

I'm generally looking for something in the cloud and/or backend internet services, but I'm open to something new as well.
Bomarc and Genie: The Air Force’s Atomic Interceptors
> It really does seem to be the case that charismatic individuals can, as a rule of thumb, get away with almost anything at all.

I've come to believe that the ordinary state of human consciousness is actually a form of mild anhedonic depression.

It makes sense for a species that evolved in a world that rarely changed when most activity consisted of slow and painstaking work like farming, making simple things, and hunting. Up until the past few hundred years nothing changed within the time span of a single human life for most people. The ability to zone out for long periods and tolerate monotony would be an advantage. Being too "wound up" would be maladaptive as it would lead to needlessly reckless behavior and destruction of community.

But we don't live in that world anymore.

This is why stimulants of both dopaminergic (caffeine, amphetamine, modafinil) and serotonergic (antidepressants) forms are so popular. These drugs actually normalize our consciousness to the contemporary world. If homo sapiens evolved in the modern world we'd all be wired as if we were on 5-10mg of amphetamine and 10mg of escitalopram all the time.

Here's the thing though. Humans are hyper-social to the point that the mental state of others affects our own mental state. This is partly why centers like Silicon Valley and New York are so powerful-- being around a lot of like-minded productive people actually makes us more productive.

When someone comes along who is just naturally a little tweaked we say they have charisma, and we absorb a bit of that charisma vicariously. We get a nice tweaky brain chemical hit by being around them.

This makes them addictive in a sense, and as with many drugs people will toss their rational mind out the window to get more.
This might be a function of increased practice with socializing, and thereby increasing your "social IQ". I am in awe of Bill Clinton's famous ability to recall the name of every person of note he has ever met, even years later, and pick up the thread of conversation where they left off without skipping a beat. In shorter timeframes like an evening, he recalls everyone's first name he meets at a gathering (I've read of 40+ individuals recalled), what they talked about, and uses this skill to circulate the room and say goodbye to everyone.

I figured out this skill is like a muscle; use it or lose it. The more I put myself out there and greeted people and actively listened to them, the greater my recall ability strengthened over time. Personally, it helps me recall better if I take an active, compassionate interest in the person; somehow, the emotion makes the recall more persistent for me, but YMMV on what techniques help.

If you are raising young children, I've read that you start this skill early by asking the children before each party/gathering that they are expected to learn the name of one new person they have never met before, learn one fact about that new person, and remember the names of everyone they already know from before (children's parties usually are planned enough that a list of most everyone is known in advance, making this part easier). After the party, the children then describe everyone they met, the one new person they met, and what they talked about.
Speaking the truth is important. As with anything so important, there are concerns to be aware of. One is that most of us overestimate how much of the truth we possess. A second is that speaking the truth can do harm, e.g. when using it to blast people who don't yet see it—they necessarily become defensive and then the cause of truth is set back. A third is that truth has a lot of energy and if you drop it like a bomb on the playing field, you damage the space in which we're trying to explore the truth together.

The one who knows more has greater responsibility. Two unhelpful ways to speak the truth are to yell it out because it's frustrating to see something that other people don't, or to provoke people with it. The first is venting and the second is trolling, and both are incumbent on the truth-bearer to resist. If you do them, you discredit the truth you're trying to show.

Take this into account and there will be a bonus benefit, too: in cases where you don't really know as much of The Truth as you believe you do, you'll do less harm.
>Bitcoin and Ethereum are legitimate stores of value

What does legitimate mean? The only difference between monopoly money and bitcoin is that people right now believe in bitcoin. But that belief could easily falter.

The same could be said about gold, but gold a very long history and has somewhat strong demand for use in jewelry.

At this point in time, essentially all demand for cyrpto is for speculation purposes. There is some use for illicit markets but it's very minor.

I wouldn't call it a ponzi scheme because those are intentional. But the current pricing for cryptos is definitely an embodiment of the Great Fool Theory of investing.
That's such a profound experience! Do you have a reference for learning those techniques?
I just launched "tad 311_Service_Requests_from_2010_to_Present.csv" (a 10GB dataset from data.cityofnewyork.us) and it ate up all my memory without ever showing any data. "vd 311_Service_Requests_from_2010_to_Present.csv" shows the first rows instantly, and I can start rearranging columns while it is still loading, and I can press Ctrl-C to stop the load (and the rows already loaded are still available). No config or tweaking needed.
Okay.

My question was along the lines of "is this a sane default or am I wandering into a minefield," your answer is pretty much what I was looking for.

> Some of the current optimizations are so advanced and specific for each particular bit of code that it might not good to generalize from those output.

If only it were possible for the compiler to concisely describe its "workings-out". I imagine compilers can generate trace information, but it's probably pages long.

> I remember ICC generating different (but similar) code for each Intel CPU generation. I suppose it has to do with the decoder limitation (4-1-1-1, 4-2, 2-2, etc.) and exhausting execution port usage...

That's amazing. Definitely keeping that in mind, thanks!
You said:

"The front page had this interactive realtime story of how Hillary is supposedly winning"

I said:

"it absolutely wasn't showing false data that indicated Hillary was winning when she was not"

They're pretty clearly contradictory. That data, at no point, showed Hillary "supposedly" anything. You're making my point about readers not understanding statistical probabilities. 90% doesn't mean she's winning. It means she's got a 90% chance of winning, and there is a 10% chance she will lose. She lost.

> People keep saying nobody saw it coming, but that's their emotion speaking.

Quite the opposite. The data (that same data you're saying came from nowhere) showed that Hillary had a 90% chance of winning. There was variance in the polls, but pretty much all of them showed Hillary with an edge. Yes, there were a great many reports of people saying that there was a lot of Trump support across the country, but those reports are the very opposite of "objective" - they were thinly spread and anecdotal. Pretty much every newspaper ran stories interviewing those Trump supporters, but there was no hard data to quantify it.

Polling data isn't "subjective" and "speculative". There is a clearly defined methodology behind it. That methodology was incorrect in the 2016 election, and didn't accurate gauge support for two unprecedentedly unpopular candidates. That makes it "incorrect news", not "fake news".

You could argue that the news industry has relied too heavily on this sort of statistical prediction stuff, and I'd agree with you. But in 2012 FiveThirtyEight correctly predicted all but one state, and everyone absolutely lauded Nate Silver for it ("Is Nate Silver a witch?"). But really, what that meant is that each of Nate's predictions were the right side of 50%. And in 2016 they most definitely weren't.
Use <link rel=prefetch> instead. This has existed for the entire lifetime of Firefox, all the way back to the first release when it was called Phoenix.
You don't have to ssh in to a system in order to detect a rootkit or intrusion. You could run a rootkit detection app like rkhunter[1] or chrootkit[2] (though I don't know how good these programs are at doing what they claim to do) or run a filesystem integrity monitoring app or HIDS[3] like Samhain[4]. You might also pick up intrusions via a network intrusion detection system like Snort[5].

[1] - https://en.wikipedia.org/wiki/Rkhunter

[2] - https://en.wikipedia.org/wiki/Chkrootkit

[3] - https://en.wikipedia.org/wiki/Host-based_intrusion_detection...

[4] - https://en.wikipedia.org/wiki/Samhain_(software)

[5] - https://en.wikipedia.org/wiki/Snort_(software)
Most of your data (ex. search history) is not reliably stored on your phone, and even if it was it would be much better to train on the server side instead of making your phone do all of the work. Also, they probably train using data from everyone, not just one user.
You're probably right.

It looks like this project might raise well above the $48k, though. (It's at $108k as of now.)

I recognize that this can be both a blessing and a curse when it comes to Kickstarters. With regards to NRE, though - hopefully it's straightforwardly a good thing.
The threat model these defend against best is using a single login and password across a host of secure and unsecured systems out of convenience.

Some pass managers are better than others and on balance are better than the solutions non-technical (and many technical) would otherwise use. This is highly dependent on your threat model, degree of technical skill, actual data risk, and behavior.