skysight-inc/HackerNews huggingface dataset:
Well, we're not all like that. The average wage for a developer is far lower in much of Europe or Asia that it is in North America, and in North America it's far lower outside of Silicon Valley.

Most of us won't get $200K a year as a developer regardless of what we do.

As for why people in Silicon Valley are overpaid for this work? Well, I suspect it's partly down to a bunch of factors.

For instance, things like rent are pretty high over there, so someone being paid a normal wage couldn't really afford to live in the area. So any Silicon Valley that can afford to pay its employees high wages will, just so they're not commuting miles into work every day.

Competition is important here too. If your competitors pay high wages, you'll also need to pay them in order to lure in employees. So with many Silicon Valley companies pay hundreds of thousands of dollars a year, their competitors have to follow suit not to lose their entire workforce.

Same with a lot of things like free food, transportation, etc. They know people look for perks when choosing a job, so offer them in order to be overlooked for a company that does.

That said, those things are not uncommon in other industries or companies. Whether a company offers free food, charges you for it or tells you to get it yourself from the local high street depends on the company. The latter is admittedly a tad more common outside of the Valley and US in general though.

And yes, there's likely a bubble aspect here too. Startups in the Valley are often flush with cash and finding it very easy to raise capital. So it almost encourages them to splash out money on things like wages and office perks.

Hope that helps!
What's MO?
Show HN: `cleanlang` a clean compile to JavaScript language
> I read those posts regularly, but I don't remember them announcing any new features or improvements in PVS-Studio itself.

PVS-Studio Release History: https://www.viva64.com/en/m/0010/

PVS-Studio project - 10 years of failures and successes: https://www.viva64.com/en/b/0465/

How PVS-Studio does the bug search: methods and technologies: https://www.viva64.com/en/b/0466/
Preventing phishing won’t stop ransomware spreading
All of these except GC also hold true for the languages that I mentioned.

As for GC, I think that Mercury avoids its use https://lirias.kuleuven.be/bitstream/123456789/131304/1/Mazu...
I took me a while to figure out what it means since nothing was on the front page. I clicked the black thing trying to get back to the home page. That linked to battle for the net. Probably better if they had a message instead of just the black out metaphor so it's totally obvious. Maybe I missed something but right now it looks like someone has to click it before fully getting the message.

And to site admins: Thanks for doing something in the first place to bring attention to the net neutrality battle. :)
Show HN: Idea Portals and G Suite SSO
Firefox is a good one. They're clearly implementing a fix for this bug.
wonder when the X-project for grey goo is starting.
Perhaps this is what you are looking for: https://chrome.google.com/webstore/detail/google-cache-brows...
Right. So regardless of his qualifications, you would have objected to his suggestion. So why ask at all?
Increase the size of the buffer to N > 1 songs and allow the device to tell the headphones to skip ahead in the buffer. If "next song prediction" is hard (e.g. the user is clicking around their library), support a device "burst push" mode that lets the device send the first M seconds of a song very quickly.

On a side note, it's interesting that this buffering problem is identical with switching channels on any streaming service, and that the buffering delay is a significant psychological barrier to moving around, and that traditional radio works really friggin' well for what it does.
Compcert is guaranteed to compile correct C code to correct assembly (given its TCB assumptions). It doesn't say anything about incorrect C code. So in order to benefit from CompCert, first you have to prove that you have valid C in the first place, which is no easy feat. You'd probably be better off using a language that's designed with verification in mind, like Cogent or ADA/Spark, or waiting for lambda-Rust to become production ready, since in those cases you won't have to prove tedious bureaucratic memory safety invariants for the vast majority of your code, and can focus on functional correctness (or, if you just care about memory safety, you can stop there).
Public ownership is where this ends up at.
WeWork Hits $20B Valuation in New Funding Round
Agreed, and it's never stopped me, but a couple times I've told people that and their response was along the lines of "on their birthday? harsh."
IMHO this should be blocked by Tracking Protection.
I'd agree. The single-player for the new Doom was excellent, but not groundbreaking.

The new Quake I'm not as much of a fan of, since it tries to be Quake 3 with some Overwatch bits tacked on.
I'm guessing that the lack of detail on this is really an explanation for expectations of this. It probably doesn't work well for anything complex but, if it works halfway decently, this could be a boon for those trying to get out from under the dark Adobe umbrella.
I'm not sure I understand the "opt-out" they negotiated with Google.
Is this a user-level opt-out? Or did Mozilla convince Google to silo the Mozilla data?
> So, I have to [...] just because you

Please edit this sort of acerbic swipe out of your comments here. It breaks HN's civility rule.

https://news.ycombinator.com/newsguidelines.html

We detached this subthread from https://news.ycombinator.com/item?id=14746365 and marked it off-topic.
I gotta say that maybe part of the problem is the two guys they mentioned with car payments are paying more in a month than I pay for my rent in Montana.
https://news.ycombinator.com/item?id=14505739
Merge Images with Python
>No, what technology you choose depends first and foremost on what you want to achieve.

Maybe for you. But not for me. I find the rest of your post to be very mean spirited.

I don't work in the games industry because those constraints sound miserable.
Ghoulish online game urges young people to end their lives
Subsidized electricity? Just one data point, but my electricity bill last month in Shanghai was ~$15.
No GC, higher performance than either. Most other safe languages have more overhead than Rust.

As for why not use sanitizers and such: That's an ongoing cost of using the sanitizer. Rewriting in Rust is a one-time cost, and can be done incrementally.
I disagree with the statement that a framework like react is something that's easy to pick up. It's true that having solid fundamentals will help you learn it faster, but this alone will not make up for the complexity that a framework brings. Perhaps because the author uses react every day that they think it's easy, but it would take months to understand how to use it at its best. Additionally, if a react shop is hiring a new front end developer, it makes sense for them to hire a react developer. A developer with little experience in the framework will not be able to provide insights on how to make development easier for the team.
Carpe Data
I'm hoping this company can do something new and "disrupt" the monolithic insurance companies of olden days. Any insights?
Not 100% sure on this, but I believe devices utilizing Apple's W1 chip use a combination of Bluetooth + WiFi (WiFi for the initial handshake upon connecting probably or something like that). If anyone's ever used AirPods it's amazing how reliable they are compared to other bluetooth headsets.
Notice: The mods just changed the title from "Firefox secretly tracks users with Google Analytics in the addon settings" to "Firefox tracks users with Google Analytics in the add-on settings"

@mods: The "secretly" was used to signify the fact that Mozilla does not inform users about this fact, their Privacy Policy does not cover it, and at no point does any page, modal, or disclaimer tell this.
From the linked bug, it sounds like the data is silo-ed and no user opt-out is needed.
Some of the issue was that ISPs refused to upgrade their peering connections even when the other party offered to pay for both ends of the upgrade. They wanted to double dip, and anything short of that they refused.
In contrast,

I drive a car to work, because the summers are already too hot and humid for me to bike with a respiratory condition.

I work in the office 99% of the time because my bosses have a 19th century mentality

I fly at least twice a year to escape my miserable existence somewhere far away

I never take transit because I'm stuck in an endless suburban hell and the nearest bus stop/grocery store is over a mile away

I only shop online because traditional retail has a horrible selection and partly sells the same Chinese shit that Amazon does, just at a higher markup

I eat beef because food is one of the few pleasures I have in life

All of my food comes from supermarkets because it's cheaper.
I think the next revolution in machine learning is when we start connecting specialized neural networks to each other. A neural network of neural networks, basically.
> You're comment

Need to thank you though, for adding value.
In my opinion, there are more reasons to rewrite Rust code in C.
We've banned this account for repeatedly violating the HN guidelines and ignoring our requests to stop.

We detached this comment from https://news.ycombinator.com/item?id=14746533 and marked it off-topic.
I'd love any comments from folks who understand what their core value is or is not (independent of whether this valuation is justifiable - that's a hard case to make for any 'darling' company).
Yes. Turns out the "population bomb" didn't occur as he had predicted. I don't think that rules out the possibility of the effect human populations are having on our ecological resources.

The current global demand for beef has led to massive deforestation of the Amazonian rainforest in order to plant soy crops... just to feed cows.

We might be able to sustain our population at the current size but I doubt our consumptive habits will be maintainable.
The difference is not in what was caught by AFL, but what wasn't (and also, what would have happened in C had AFL not been run).
I think its a little bit of both. Primarily it is aimed at legacy software. IMO not a lot of new code is written in legacy C, so we have a problem with having a ton of dependencies written in a way that may not be the safest or most reliable (from recent experiences). The authors suggestion is to rewrite parts of those applications that tend to be buggy (mostly I/O parts) in Rust.

I really hate to see the naysayers comment on this article without even having read it. I think the author made a very good point.
How about Ada/SPARK then?
Yeah, realised that a short while after I posted the topic.

Still not quite sure about how net neutrality ties into the colour scheme and style choice though. Seems like it'd work better for something like the Edward Snowden leaks or what not.

Maybe they could have made it feel like the site was only half loaded with a banner underneath saying "please upgrade your internet connection to view the rest of this site"?
Why do you think the "free market" would correct for "what they need"? The free market doesn't care about what anyone needs.
I guess I'm interested in browsers who's developers wouldn't have done this in the first place - a browser which has privacy as a core principle and who's develop we wouldn't consider pushing any data, regardless of aggregation or commercial value, to a third party without explicit consent..
Don't forget the "bug" where Google's supercookie was un-deletable https://bugzilla.mozilla.org/show_bug.cgi?id=1008706
If you have a strong enough signal that adding a new AP is not neccessary, then you don't need to roam. If you have multiple AP's and can't roam between them, you're no worse off than if you had one.

If you have malfunctioning hardware, then you're going to have problems whether you have one AP or multiple AP's -- use better hardware.
No matter where you develop the hardware, you really can't get over the fact that you have a small crowded spectrum where bunch of devices keep trying to transmit over you and causing collisions.
> Rust isn't going to help you with that.

As I noted elsewhere in this thread ( https://news.ycombinator.com/item?id=14753692 ), I've actually been working on a low-level media decoder in Rust. Compared to my earlier work in C (the xmlrpc-c library, for example), my Rust code has stood up very well to heavy fuzzing. My xmlrpc-c code, on the other hand, was written with ridiculous levels of paranoia, and it has been the subject of multiple CVEs thanks to a third-party XML parser I used.

So in terms of practical engineering reality, Rust seems to make a big difference. And even more importantly, it means I can trust other people's libraries a bit more.

Rust's practical advantages seem to be:

1. Runtime bounds checks! I wouldn't have thought that this was the most important thing, but when fuzzing, it's the last line of defense against quite a few potential exploits.

2. Debug-mode checks for integer overflow. Rust defines integer overflow as an error, and debug builds will actually check for it. This turns out to work really well with fuzzers.

3. The borrow checker. In my experience, this is actually less useful than (1) and (2) above in terms of preventing security bugs. But it does help.

So as somebody who's written parsers for untrusted data in both C and Rust, I definitely found that Rust helped me a lot. Of course, Rust can't help with some forms of stupidity, such as writing a bad custom memory allocator and using it to handle key material. OpenSSL's problems go well beyond the ordinary hazards of C.
Minor nit: I believe that you can get memory allocators that provide upper bounds of execution time. But it won't be the default allocator in most languages. Also, you need an allocator that cannot ever fail to return a valid block. Even if you have all that, it still makes it much harder to prove that your worst-case timing is fast enough.

So, yeah, no allocations in situations like that. Allocate at start-up, and re-use your buffers (for that kind of code).
Stop Realtors from Stopping Competition from Zillow
there's actually a pretty serious niche of us Go game developers growing as well
What Both the Left and Right Get Wrong About Race
I know better than The Algorithm whether I want to see every post or not. But I'm not allowed to decide that because The Algorithm isn't there to serve me it's there to serve Facebook.
It's pretty standard to include your funding sources in your publications, and some see it as morally imperative. That it was not included is suspicious. But yes, it's an additional safeguard on that filter. And I think you give the whole system a little more credit than it deserves. At the end of the day, the publishers need to make money and they need papers to publish. Don't just assume that just because something is published in a peer reviewed journal that it meets the highest standards of quality. It's very often not the case.
There is a way around it. When you release a new version you offer it for cheaper for limited time and you notify your existing customers. Of course, some new customers will buy it as well when it is discounted but it is acceptable loss.
The comment is intimating that many websites are over-engineered.

Consider it a suggestion to developers who are tempted to implement cool new tech on a site just to tickle their own itch.
To rephrase this a little more concisely:

SCOTUS turns based on which side of the bed Kennedy wakes up on (on most issues). There are 4 solid liberal votes and 4 solid conservative votes and Kennedy in the middle.

Kennedy indicated in a ruling a few years ago that in theory he's uncomfortable with gerrymandering and might be open to striking them down, but apart from "I know it when I see it" he doesn't know a neutral/nonpartisan way to actually detect it. And "I know it when I see it" doesn't work well as a judicial test, there needs to be a bright-line somewhere that lower courts can apply.

Well, a bunch of mathematicians heard that and said "challenge accepted" and have been working on mathematical models to quantify the level of gerrymandering. And now the court cases are working their way back up to SCOTUS, only with the academic models that Kennedy has indicated he wants.

Now we get to find out whether Kennedy's interest in neutering gerrymandering actually goes as far as being willing to strike down a gerrymander. Because it's easy to talk the talk, but at the end of the day Kennedy is still conservative-ish and gerrymandering heavily benefits conservatives overall.
Thing is... he's right, though, and it IS rather on topic. Public bug trackers only function as long as the peanut gallery doesn't decide to descend. Once it DOES descend on an issue, the issue often becomes a cluttered off-topic mess of ill-informed nastiness.

Just look at any Mozilla bugzilla issue addressing Linux video acceleration, as an example.
I love how businesses are turning social left and right. The zeitgeist that we're moving into gives a lot less power to money.
Once upon a time I went to a basketball camp at the College of Wooster. Thanks for the suggestion!
Given Firefox's pro-privacy positioning vs Chrome [1] and the fact that, by virtue of being in about: these requests get sent even if the user is browsing in private browsing mode or has extensions installed explicitly to block this kind of traffic [2] it's surprising the Mozilla employees in that thread are so keen to dismiss this.

[1] https://mobile.twitter.com/meatcomputer/status/8813107782251...
[2] https://github.com/mozilla/addons-frontend/issues/2785#issue...
Uber is clearly the best option these people believe they have.

Knowledge is not perfect, and efficiency is not instant.
>With self signed, when you first interact with the server, it could be anyone. Self signed https only gives you the guarantee that any further interaction besides this first one are with the same server as the first one.

If I create a CA and install that CA's public key in my browser, then use that CA to sign the cert for a device on my network, why exactly will it "be anyone"?

Unrelated, but this push for HTTPS for everything isn't without downsides. Many apps gather extensive data when running on my devices and they communicate that data back to some central location, sometimes under the guise of functionality, sometimes straight up nefariously, but always with a side effect of giving that central entity a complete record of what I'm doing and often also exfiltrates my data (contacts, etc.)

Honestly, I've been tempted to set up a transparent TLS terminating proxy at my home to give myself some possibility of seeing wtf is coming and going from my network.
The so called tolerant left is stealing the credit card information of hundreds of poor trump hotel employees and residents! /s
How brands are accessing UGC
I agree with you. From my POV this isn't a net neutrality issue. This is a promotional offer.

It would be a net neutrality issue if the ISP blocked B and C as services so you were forced to only use A if you wanted music streaming. Or similarly, if music streaming services were penalised for bandwidth to the point of being unusable.

For me, net neutrality isn't about not making one service better. I have no particular issue with that. It's about not making services unusable.
This single image is really all you need:

http://www.wordstream.com/images/what-is-net-neutrality-isp-...
That's assuming there's an officer involved at all. I also didn't have a specific definition of "serious crimes" in mind, whether it would only include violent crimes or also non-violent ones like burglary or fraud (of significant value).
Martin has made no guarantee of compatibility or even to supply a Scalafix app. The fact you can do this relatively easily today is just a consequence of Dotty being very young. As it evolves and becomes more complex, there is no guarantee that a translation from Scala to Dotty will even be possible to achieve automatically.
Certainly, the legal issue of a tax vs. a mandate is decided, but Americans' comfort with this tax to cover other Americans as a matter of preference is not.
I'm confused. There are about 40,000 known species of vertebrate. There were 18,000 NEW species of life in general discovered in 2016 alone (http://www.latimes.com/science/sciencenow/la-sci-sn-new-spec...). It's estimated there are more than 8 million species of plant, animal and insect life on the earth. Population decline doesn't equal extinction.
So how, pray tell, do we find ourselves in a mass extinction event when less than half of vertebrate species are in decline, less than 1% of species in general are in decline, and when we're still discovering new species and adaptations by existing species every year?
Yup, most mobile GPU vendors have similar things for Android and they're incredibly useful for debugging and profiling.
This is pretty standard practice for all companies, isn't it?

I mean would we be surprised if an oil company or tobacco company were doing this?

I think the problem here is Google's attempt to position themselves as being one of the "good" companies. They tried to have their cake and eat it too.

Frankly, I've been skeptical of Google for a few years now, not because I think they're inherently evil, but because any large, powerful institution is going to be blind to the ways its interest conflicts with the public's interest.

So in a way, I would defend Google here. They're simply doing what any organization does - defend its own interests. The problem is that the rest of us have not been sufficiently skeptical and critical of Google. We've been too wowed by Google's supposed technological wizardry.
That's right. Here's some hemlock. Eat it. It's all natural and good for you.
Nodle.io uses Bluetooth to build delay-tolerant IoT networks
California is not the problem. Why would you waste your time supporting the wealthiest, most educated, most progressive state? You would spend millions of dollars and countless hours in California, only to lose because of Texas, Arkansas, Alabama, Louisiana, etc. etc.

You need to focus your efforts on the red south, which are filled with highly uneducated, highly manipulable people, which political parties use to get elected.
Can someone please respond to the actual pro-repeal arguments (in a non-John-Oliver-smug way)? Everyone is focusing on "woe is the unfree internet!" which seems like a spoonfed, naive response with no content. And just having Google et. al. on one side isn't enough of a reason, given their motivations. The given reasons for the current FCC's actions appear to be:

1. The Title II Regs were designed during the Great Depression to address Ma Bell and don't match the internet now.

2. The FCC isn't the right vehicle for addressing anti-competitive behavior in this case; the FTC would be better.

3. The internet didn't need fixing in 2010 when the regs were passed.
The argument they're making is at one point the drivers were making more money and could afford to buy a new vehicle or whatever. Then because of fare reductions and therefore reductions in pay they're now saddled with debt and can't afford housing.
So your argument is that because rust doesn't solve all problems people shouldn't strongly consider replacing C code with it, even though rust avoids entire classes of critical bug types in C?

I happen to like rust, though I would not suggest that it is the only solution to the classes of problems it avoids. I would, however, suggest that people very strongly consider using languages that avoid the problems that rust avoids whenever possible. Like, literally any time you're considering writing C or C++, at least strongly consider rust or another much safer option.