skysight-inc/HackerNews huggingface dataset:
A static analyzer with sufficient inter-procedural analysis (i.e. across the user/kernel boundary) could certainly see the type of the allocated structure in userspace, and flag the kernel read of a larger type.
I am beginning year 4 as a co-founder of a startup. I know how tough it can be, and how it can feel when you don't accomplish what you set out to.

People seem to be keep saying that you shouldn't get down on yourself. While true in the long term, it's perfectly normal to feel down sometimes. You've been through a lot. It's OK to feel fear and anxiety, and even question yourself at times. So long as you realize that it's temporary. Because you will bounce back. The fear and anxiety make it so, because it motives us. You are tough and determined, or you wouldn't have lasted anywhere close to this point. Respect!

Another thing to consider is.. what is your end goal? Is it to constantly be challenged? Is it loving to start from scratch and build something with a small team? If so, take a break, and try again. You aren't even 30. If your end goal is a slower pace and more financial stability, because you think long term that is what you will want, take a role at an established company. Your experience and determination as an entrepreneur will be sought after. And you can always do side projects.

Lastly, keep in mind why you took the risks in the first place. If you didn't try, you wouldn't have been happy. It's ok to feel what you feel. Take some time to rest and re-charge. You'll be back :)
Just took a shot at one! https://youtu.be/dC-1OQ-3fb8
Just took a shot at one! I'm really eager to learn how to edit, this was my first time! https://youtu.be/dC-1OQ-3fb8
One reason why theories need to be testable is for checking out which of two theories is correct. If both theories fit with what has been observed so far, you think of a situation where they make different predictions, and then collect some new data and then see which theory turns out to be correct.

String theorists seem to think their theory is so beautiful that there is no need for it to be able to pass this sort of test.
This app uses AI to turn design mockups into source code
I do this frequently and I utilize their resume to power the code.

Someone says "I am a 9/10 in JS" I give them something that uses the animation frame api, the dom api, and a few more javascript APIs that I personally am not fully comfortable saying that I am a 9/10 on (been working with JS for over ten years) and see how they decipher what it is doing, what jumps out, and how they would review it / give feedback.

9/10 times they don't actually understand Javascript.
I feel compelled to comment, as the comments below are lacking data.

Short answer: Yes, psychedelics including acid can be used correctly.

Psilocybin (the active ingredient in magic mushrooms) has a very similar, albeit a few hours shorter, effect to acid, and it is currently in FDA Phase 2 trials for emotional distress related to cancer, and is likely to soon progress to FDA Phase 3 trials. Some anxiety will occur in some patients, but true "bad trips" where the experience is overall negative seem highly avoidable with the correct procedure.

https://tripsafe.org/acid/#5-bad-trips-do-happen-though-poss...

> A 1955 paper found that anxiety occured in 9% more people who took 25-75 micrograms of LSD, and 14% more people who took 100-225 micrograms of LSD, compared with the placebo group.2

https://tripsafe.org/lsd/#what-is-the-probability-of-having-...

> At a dosage of 67 micrograms17 in a therapeutic clinical environment, we might expect 0% of people to experience some extreme fear,18 for an LSD-adjusted average of around ~2 minutes of strong anxiety19, and we might expect around ~45% to report a persisting positive increase in mood from this dosage assuming they had first tried 35 micrograms, then 67

The last point is particularly good. An expected average of 2 minutes of strong anxiety. With highly compelling therapeutic upsides.
I found 2000 in the pocket of a thrifed suit jacket
So I listened to this again and I feel compelled to update that it's merely a good Planet Money, not a great one. Not as much detail about the issue as I'd remembered.
This seems very odd for someone to define a backend portion like this and ask you to build on top of it. The way I would approach this situation is list examples and situations where it makes your job harder and have reasons why a different approach would be better. If telling them that they will be stuck with these issues after you've moved on in a few years and they are ok with that then that's how it goes, nothing else can be done.
You have supplied one bit of anecdotal evidence, you want me to list all the people/companies who held on to apple shares ?
Noninvasive Deep Brain Stimulation – Has Neuroscience's Holy Grail Been Found?
Generally to get candidates who are like this to open up, I simply assert:

"Tell me what you are thinking about right now"

"What is jumping out at you for you to be stalling?"

"Did you see something?" --> "Why?" --> "You seem to be quiet and deep in thought, what are you thinking about?"

etc...
Keymaps being sets of shortcut keys? GIMP used to have that with dynamic update and easily​ shared keymap files.
Ask HN: How/where to sell a side project?
For those of us who have side projects that have paying customers, what's the best way to sell these off if we no longer have the time to support them? I know of places like Flippa, but the buyer would require some technical chops to maintain the project. What are some other places?
Didn't read the paper (got crypto burnout after 4 years at Kraken) but it occurs to me that the problem with explicit trust is that it is usually a one size fits all approach or someone has to tediously specify it in specific terms, neither of which work well at scale in the real world.
Great app! I like where it is going!
Using the frameit from fastlane to add device frames to app store screenshots
Exactly. Without empiricism, people are free to dream up anything they wish, and there is no way to settle disagreements.
Also relevant: http://hackaday.com/2015/03/28/arduino-srl-to-distributors-w...
Hiroshima-style explosions. I doubt that. Nuclear bombs use highly enriched uranium or plutonium and use inertial confinement, which requires an precisely controlled explosion.

A Tchernobyl-style explosion, caused by water being heated by a runaway nuclear reaction is more likely to happen naturally.
The Copenhagen interpretation, also known as "shut up and calculate", asserts only that the mathematics of quantum mechanics are accurate, that is, predictive of observation.

Assigning metaphysical implications is declared out of bounds. It's a useful compromise.
Just tried to read the Wikipedia article... I hope I'm out of engineering before quantum becomes the new ML.
Good questions on AdaFruit's side.
I am interested in knowing what is the result of this inquiry.
I think you may have misinterpreted something I wrote. We seem to be saying the same thing in different ways.
Isn't it embarrassing that nobody cared about this until their favourite team lost the election and now they have to find something to blame it on? He should have lost because fake news isn't fair! He should have lost because of popular vote! As the article says, it's been around for thousands of years. We should just accept it. The UK has very popular fake news papers like News of the World and The Sun. I once read an article about how a donkey's legs were attached to a human who had lost his legs. It's entertainment, just like all news some people might believe it. It doesn't matter.

For people who want real news, we have trusted brands, like The Guardian or whatever.
The 9.x GUI is still the default.
Cryptocurrency is already doing this, I don't have the names offhand, butt, (Ill eave the typo, hehe) there are several regions in Africa where bitcoin is a primary currency being traded.
Will need to double check some machines to make sure these two don't bite me:

On Unix systems the environment variables SSL_CERT_FILE and SSL_CERT_DIR can now be used to override the system default locations for the SSL certificate file and SSL certificate files directory, respectively.

The os/exec package now prevents child processes from being created with any duplicate environment variables. If Cmd.Env contains duplicate environment keys, only the last value in the slice for each duplicate key is used.
You can't be sure they're implemented properly. Or what if they run out of "fuel"? Like the DAO's code.

It's not enough that contracts execute. They have to be amenable to audit.
Yeah, that's horribly ugly. But that is because list manipulation was hacked onto the Python language. The fault is more Python's than anything else.

In other languages that same idea could be fairly clearly expressed.
I agree, when desktop software asks for a subscription, it annoys me greatly. Fuck Autodesk in particular, because Fusion needs me to log in, won't let me save my files anywhere but their annoying "cloud", and Meshmixer had the audacity to not let me use the software because there was an updated version available. Literally, the two options were "update" and "quit".
Show HN: StartupGen – Generate startups with a click
http://hackaday.com/2016/10/01/arduino-vs-arduino-arduino-wo...
You didn't answer the question "At what point is something so far away that you move on to ideas that are less tested but more grounded?"

I have noticed this is common with string theory defenders. They often don't really address the objections, but instead move off in some other direction they find more congenial.
The Konami exodus
That's how you put in a buffer overflow backdoor.
That might be true in theory but it certainly isn't true in practice. I know because I have done this work before. Documents passed through email tend to get mutilated by each application that touches it, such as: email servers, user agent applications, and sometimes network proxies and other application tools on the line. Microsoft applications were huge offenders, particularly MS Exchange which added all kinds of crap to the document.

The worst was webmail, which is an email client embedded in a web page. The documents would have to be mutilated so that contents didn't leak outside of a bounded area on the page and visually kill any advertisements or other controls on the page.

If you embed HTML in email and then embed other grammars inside the HTML these applications will brutalize your document at every step. If you are fortunate and extremely defensive your document arrive at a first destination mostly undamaged, but after that any retransmission will thoroughly crush its soul.
Yes. Following reasons:

* I work a lot with low level data and I prefer strings to be an array of bytes. The forced unicode support is stupid for all my use cases. Also Unicode in 3.x support is rather flawed:
http://www.cmlenz.net/archives/2008/07/the-truth-about-unico...

* Major APIs now return iterators or views instead of simple lists. This is rarely justified introduces unnecessary complication in many cases. Everybody knows list, why not keep it simple. I can't count how often I list() all the things just to get things going and because I didn't bother to look up the API to check what types are returned.

* I have to convert a lot of clear text data formats and needing to use 'print(x, end=" ")' instead of a simple 'print x,' is really cumbersome. I think printing something is absolutely substantial and it is justified for "print" be a statement.

* There is a distinct performance loss if you directly compare 3.x to 2.x at least for all my use cases.

* The sudden harsh break of backwards compatibility was completely unnecessary and stupid. Why not introduce new features slow and mark old features as deprecated or allow to specify the version in the header. There are a lot of ways one could handle this better.

* Python 3.x may be a marginally better (e.g more consitent) language than 2.x. For me it only introduces inconveniences. It takes a huge amount of effort to port code from 2.x to 3.x (if you want to keep it clean and readable). The practical benefits are close to zero (and you even loose performance). This is why the community seems to agree to stay with 2.x for a very long time.
No, it does not imply that, but it leaves that possibility open.
Google knows me too well. The search rankings differ per user.
> A security company commenting on these matters suggests undue interest in manipulating the infosec community.

Wait are you saying that it's so ridiculous for a security company to care about entities manipulating public opinion via the internet that it suggests they are trying to do the same thing? Of course this is within their realm.

These guys have a solid track record. Not only for what basically became the de facto free Windows anti-virus for a decade plus but for doing research in all kinds of areas and publishing it to their blog: https://www.trendmicro.com/vinfo/us/security/research-and-an...
We can't even simulate a nematode worm right now. So the ethics are pretty easy: https://en.wikipedia.org/wiki/OpenWorm

If you want to worry about overlooking artificial life, a more interesting scenario is some kind of evolutionary pressure among malware, leading to a computational equivalent of roaches or even crafty raccoons, stealing a living from our internet-of-things trash cans.
Can you freelance using a boutique consulting or are you looking for full time with them? I like to know because I am looking for something like this as well.
I'm pretty sure git stores diffs not just whole files everytime.
You cannot remove the open-Source from something that was previously open-source. I'm pretty sure its a one way street.
Speak for yourself. Most of us don't make fun of others in a cruel fashion, even if they are wrong.

After all, as nerds, we should have an idea what it's like to be bullied.
I would like to move from 10 shared hosting sites to a VPS but do not know anything about setting the servers, file transfer, app installs etc.

Can you please recommend a resource / book for VPS newby?
>Capital-F Fake news is especially egregious, but this definition of fake news, which is just about manipulating opinion, is _everywhere_.

This could be fixed by teaching and focusing on critical thinking. The fact that critical thinking is the least important skill taught in schools should be a hint to how important the ability to manipulate large sectors of the population is to those in a position to do so.
> String theorists seem to think their theory is so beautiful that there is no need for it to be able to pass this sort of test.

I don't see any evidence that string theorists don't believe that having practically-testable predictions is desirable.

IIRC, actually, there was quite a bit of noise a few years back when string theory was the basis for in-principle-testable predictions regarding quantum entanglement, but I don't know if any practical tests have been constructed.
To note a few things regarding the interview and hiring process (I do a lot of it, have done about 20 in the past two days), the reason for the quiz and not using your portfolio (unless its extremely outstanding and you are fine doing a live coding questionnaire) is so that we can judge all the candidates equally and fairly.

It gives a common baseline to judge. Each candidate does the same thing and we have a good idea of what we are looking for, the rest of it tells us how you think, how you approach your work, organize your work, and best of all? You can compare that to how others do it.

Now, not to say that's everyone, that is what we use it for.

---

Before, as an Engineer / Manager, I hated doing "live coding" tests when it wasn't relevant. For example doing "algorithms" or "palindrome" or "sliding window dns" or "O(n)" examples when you're doing front-end or a management position screams to me that the people doing the interviewing don't know what they actually want.

Instead quizzes or live coding that are relevant like "tell me how to access all the elements in this particular element and traverse the children to apply some styling" is much more relevant and will show me the thought process, their ability to retain information, and their recall. It also shows communication ability when they get stuck and ask for help or use me as a sounding board.

It's not always about your implementation, but how you handle the situation and communicate
Once you've licensed something as open-source and published, that version with that license will always be there. You could take a future private version of the thing (assuming no code contributions) and license that differently.
The 'rr' project gets a side mention, but if you're into debuggers, it's really worth a look - a very practical "record and replay" debugger that allows you to move around in time in a debug session. http://rr-project.org/
Photoshop rendition of Egyptian Pyramids
Can't you still prune branches and the like?
Bitcoin and the rest of cryptos need an IETF-style organism issuing standards and guidelines... that could solve many of the governance problems, including forking dramas (SegWit, DAO, etc)
Show HN: “Moving to Harvard” My First Vlog
https://youtu.be/dC-1OQ-3fb8

Trying to learn how to edit video and create engaging content! I'm going to be sharing a lot of cool happenings, inspirational moments, and just a bunch of other fun things, so let me know what you think!
I think the Arduino civil war is inevitably going to lead to ESP8266/NodeMCU boards taking over this market.
In all seriousness, I would like to know why you object to me using "we" to refer to the nation where I live and hold citizenship. I feel like you're implying some kind of nationalistic sentiment on my part, but I have no idea why, especially given the context.
Coming to EDC
It is the responsibility of cross-thread communication abstractions to use the right fencing (if it is touting itself as safe), probably with the various things in std::sync (especially ...::atomics) if it is pure Rust. For instance, spawning a thread, using a channel (std::sync::mpsc) or a mutex all do such things.

Just calling a function taking T: Sync doesn't need to do any of this, since that call happens all on a single thread. The function might do it internally if it needs to, but that is its own explicit implementation decision.
I think is about new Arduino products not being open source. Source files for old Arduino products are still directly available.
In 2017, one ought to use browsers' native crypto API instead of doing crypto in js...
Yup, overloading existing operators for new meanings is smelly. It’s better if the language allows creating new operators, so you’re not stepping on someone else’s semantics. For example, Haskell has “</>” in the “filepath” package as an alias of “combine”. Custom operators can certainly be abused, but most packages that define operators only do so for good reason, and crucially they’re still searchable with Hoogle.
Well, except that gratuitous licenses are (irrespective of their surface terms) revocable at will. Promissory estoppel may mitigate, in some way, the effect of such revocation against people who took action in reliance on a promise of nob-revocation before or without knowledge of the subsequent revocation, but it is far from clear that the Free version will always be free; license terms don't override the governing law.

(Now if there is a Free version under a contracted-for rather than gratuitous license, that's a bit more secure, though there are ways that could go away, too.)
It is equitable, but it is not efficient. At least this is better than a Vickrey auction though, where you would only get paid $5.01 and spend $45 (net loss) rather than see the bids and do nothing. (Or see the bids and lose, but get paid $40 rather than $5.01)
How much traffic do you drive per month? There are exchanges / SSPs that would do an integration with you but that is going to require scale.

Pretty much any SSP is going to ask you for a minimum of pageurl or app-level data in order to prevent fraud on their end.

I'm sure you already know, but you are going to take a big hit on eCPMs as a lot of advertiser money is connected to behavioral segments (and thus cookie / device id data).

Is your site general focused or do you have a specific niche? Some specific niches (eg targeting programmers) will be able to pull in significantly more through direct sponsorships and/or ad networks specializing in your vertical.
ESP32 development boards are also very impressive. And the prices are dropping every month. Can't wait to see that ecosystem evolve.
Bell Labs' Research (Prof Brian Kernighan) – Computerphile
This idea, which lies behind a lot of American libertarianism, says that theft (as taxation is construed here) outranks most or all other moral values, but does not explain why.

Instead, it hopes dogmatically that other moral values will be met as a side effect of following this one.
>when it was the result of a gradual evolution //

What's the evidence showing it was gradual? Big jumps may be unusual statistically [what set are you sampling? 'planets with apex predators that are bipedal mammalians' looks like too small of a sample to make statistical inferences??] but then so is genesis and it seems that happened.
Also, you can add a teaspoon of vinegar (white, apple cider, balsamic, etc. as the mood strikes) to lots of dishes that don't call for any vinegar at all, to perk up the flavor in pleasant ways. My favorite use case for this is split pea soup.
You can also indicate the binding should be done immediately when you compile your binary. For example with the following arguments to cc: -Wl,-z,relro -Wl,-z,now

Usually security-sensitive binaries are compiled with this so that the GOT can be made read-only (although this isn't necessarily required -- PaX described a way to do this by mprotect()ing before and after each update to the GOT).

Ubuntu 16.10+ compile every binary like this, which is fine except it breaks ltrace and co, as I described here: https://stackoverflow.com/a/44295494

As well as for security, sometimes setting LD_BIND_NOW is good for performance, for example see AFL: https://github.com/mirrorer/afl/blob/a08fadf3cb0b0beffc0e4f9... (but normally it's not and you end up do a bunch of wasted loading work).

Solaris has the opposite LD_BIND_LAZY but this doesn't appear to be implemented on linux.
short answer: no, it's not secure

longer answer: look at the last script tag in the demo page, it exposes the encrypted HMAC string, the encrypted HTML text, the encryption method and even the library used to decrypt. You can easily brute force the passphrase

...or better yet embed some code in a popular web page and have the netizens brute force it for you (distributed computing).

In general, client side obfuscation is difficult to perform securely as it shares too much information to be secure.
The thing is, the motivation is different when it's fake internet points than when it's actual money. The relationship between the people is different, too. The way it works now, the relationship is a cordial, friendly, familiar relationship (even though the people don't actually know each other in many cases). Throw money into the deal, even the paltry $10, and now it becomes a business relationship, with all that entails.
There is no source code either for the WiFi stuff in the ESP8266.
I remember a study many years ago that found that bird songs get longer and more complex for captive birds than they do for wilds ones. It seemed to suggest that a dense population and more free time were very important to the evolution of complex language.
You're completely right and I apologize. I'll reign it in.

Thank you for all the work you do moderating this community.