skysight-inc/HackerNews huggingface dataset:
We know how to write C/C++ code appropriate for safety-critical components, it's just very expensive and slow to develop. Any company who set out to write a social networking system at an ASIL D level (say) would be rapidly out-competed.

ISO 26262 recognizes this, which is why different components in your car are developed to different integrity levels. No lives are lost if Firefox misrenders a JPEG, so it has a low rating permitting lax development practices.

That said, with crypto-ransomware and other cybersecurity hazards, it's well past time for software development to take some pages from the safety engineering book. STPA-Sec is one example of an attempt at this.
Helping to fight the hunger crisis in Africa and Yemen
What tool did they use? Youtube-dl?

I know I routinely use that to get songs from Soundcloud for offline listening.

https://rg3.github.io/youtube-dl/
How strongly can one aim at something? Can it be measured in pounds or kilograms? Or is this one of those strong people things where they pull 18-wheeler trucks?

How far can the FCC's aim pull a semi-truck?
IBM Mainframe Ushers in New Era of Data Protection
Don't take this the wrong way but in the real world when regulation like this happens its not the end consumer that benefits.

The EU reduces your transaction costs by 2% for all retailers there's no way they will pass this on to the consumer eg my morning Starbucks did not get cheaper
The men and women at any given company who do the same job are probably being paid similar amounts of money without any regard to "equal pay legislation," because the gender pay gap goes away when you control for the choices that people make in developing their human capital.

So it's not relevant and nobody should be blaming women for not being able to give you a raise. If someone in management at your company tells you that, they are lying to you and you should change jobs.
I upvoted this. Regardless of whether I agree, I think it is a reasonable question to ask / discussion to have, and the downvote button should be used for comments that don't help the conversation in any way.
Definitely possible. There are legit VOIP services that will spoof my outgoing caller ID to a different phone number of mine that I have previously confirmed with them.
> (Condé Nast also owns Ars, by the way.)

What purpose do you think the mobilization of your contempt at this time serves?
Yes, I was in the same boat. However, don't do what I did I stay in the industry for too long, at least on a full-time basis. Leaving that unfulfilling work was the best thing I ever did.
>> Spend the next 5 years learning the ins and outs of C++, [..,] Spend a single month learning Rust. Play with it for another month or even two just to be sure. Hopefully after the 3rd month, they'll be 100% certain that their code won't break [...] Rust gives me the confidence to "compile once, run safe everywhere".

See, this is exactly the fallacy that I am criticizing. I think the belief that "C++ is too hard to learn but one could become a good systems programmer in rust in a few months" is - frankly - misguided. I think that in order to become a good systems programmer in rust, you _will_ have to know all of your systems basics (i.e. you should already be able to code in C for starters) and then some more. But sadly this seems to be the spin that their marketing is pushing also.

Personally, I found practical rust (that interfaces with actual system libraries - think openssl) to be more or less on par with good C++11 with RAII memory and ressource management in terms of practical memory safety. Having somebody writing rust code without a basic understanding of things like ressource management and threading is just as bad as having them writing "unsafe" C(++) code.

I hope I'm not feeding the trolls here.
Check out ERPNext (http://erpnext.com/). It is a modern open-source ERP solution built in Python, has commercial support and an active community.

There is also Eto (https://github.com/picoe/Eto), a cross-platform C# GUI toolkit on which the excellent Manager accounting software (http://www.manager.io/) is built.
Holy hell. At that point Id just delete those phone numbers and do everything in my might to stop the calls. Maybe even block all non contact numbers and tell people to write me emails instead.
AppBrain blog: Google Play policy update – incentivized installs forbidden
I agree that this is a problem.

Women are socialised to be less aggressive than men. They are also much less likely, statistically speaking, to negotiate their salary when starting a new job - never mind proactively seeking a raise based on their market value.

The solution - of course - is to have an employer policy of paying market rate, all the time. Satya Nadella got in hot water for talking about this problem in a gender neutral way, but the unfortunate reality is that an individual contributor can't hope to simply do good work and be recognized for it. Employees have to be proactive about ensuring that management has visibility into their work. Employers are incentivized to pay below market rate where possible and this will bite them in the ass when it comes to equal pay audits.
if your company has to make cutbacks [...] you're name's
likely to get further up the redundancy list than you'd
probably like.

If the company's going down the pan, what does it matter if I'm made redundant in the first tranche or the last?

I'm going to need a new job anyway, just in the latter case I've put in a few extra months where there was no money to give me a raise no matter how well I performed.
It's because it covers any unrelated patents, not just the ones related to React. You can't sue Facebook or its subsidiaries, like Oculus or Instagram, for patent infringement, e.g. if Oculus were to infringe on your VR or AR patent, without losing a grant to any patents that may cover React owned by Facebook. It's unknown that Facebook has any patents for React, but if it did, it could countersue you simply because you rightly assert your patent against their infringing technology. If you own a company or are part of a university that has a patent and Facebook infringes, then you can't really use any of their open source products that have this specific grant, rather than not being able to use the specific product that they are infringing upon, if any. It's their prerogative to disallow that, but it goes against the spirit of open source, in my opinion.

I speculate that this grant was probably written in this way to ward off NPEs, but I doubt any of those NPEs actually would use React and so in reality it causes issues for pretty much anyone else that cares.
>> No there is no other way.

There are various other ways, however many of them ditch the decentralised-trust nature of cryptocurrency. If this is not something important to you (which it isn't to that many people) then crypto-currency represents a huge waste of power for no appreciable gain.
Exactly this. Using a phone/website/app while I'm lifting weights in the gym is the last thing I want to do. So, I use pen-and-paper and copy over to Google Sheets weekly. That way I have the raw historical data: I can track progress, derive metrics, and create graphs with ease.

But that's not to say I don't want a better solution!

Workout logging is primarily an exercise (pun not intended) in intense user experience design. The designer must understand the task context.

There's one killer input modality in my mind -- an Apple Watch.

I have no issue wearing a watch while I'm working out. And it'd be fantastic if an app could:

- Track my daily exercise ordering (i.e. it knows what I'm supposed to do next)

- Show my rep/weight history for the current exercise and allow input of results after sets

- Monitor and record my HR throughout my workout and estimate my rest intervals/vibrate when my rest interval is up

- Offer alternative exercises when requested

- Etc.

There's so much you could do with a watch as the primary mode of input.

The watch is what you use in the gym. And the computer/tablet is what you use for analysis later.

If someone were to execute this properly, I'd be all over it.
Dammit, I glanced at the domain and expected a statement from the gangsta rap group... School is cool, kids!
Best Anonymous Email Services (Dark Web and Clearnet Email Providers Urls)
AMD's Infinity Fabric – The Implementation of AMD's 'Perfect Lego' Philosophy
I would like to see any numbers on that claim. For example expenses / turnover or profit.

Edit: or cost per transaction.
Show HN: Brandis: End-to-end encryption for everyone
> when it inevitably dies they run around exclaiming "dont blame me brah they said it was unlimited...., shouldn't have called it unlimited"

Well... yeah? If you let people advertise 'unlimited' but they can't actually deliver, you end up with a kind of market for lemons situation.

https://en.wikipedia.org/wiki/The_Market_for_Lemons
Can't you make the same argument for any kind of desktop music player? Why have iTunes or a Spotify app when you can just use your phone?
Alternative medicine with proof that it works becomes convetional medicine.
List of Jobs for People with Social Anxiety Disorder
If you're interested in building it as a web app but want a keyboard-accessible grid / spreadsheet-like interface, then you have a few options.

The first resource I'd recommend is JSpreadsheets, which is a list of open-source JavaScript spreadsheet & data grid libraries. https://jspreadsheets.com

One of the most fully-featured JS libraries is Handsontable. It looks very flexible. They have some demos on their website to play with: https://handsontable.com/examples.html?headers

(Bonus: If you're using react, there's already a react component for using Handsontable: https://github.com/handsontable/react-handsontable )
Very interesting information. I'm quite interested in the spread of western economics over other parts of the world, China, India, African countries too.

I'm not fond of consumerism at all, but the way each country structure and culture absorb it is interesting.
Thanks. Would explore this option.

It's not keyboard short-cuts, but the ease of showing a let's say 10 by 8 cell grid and entering data by moving up, down, side - left and right. etc.,
Custom URL Shortner
The "Industrial Internet of Things" is currently a very hot buzzword. I fear the worst.
For the volume of transactions they handle, it's really not.
I have no idea what Turnbull's game is, but his late-to-the-party argument is flawed.

People want encryption to work properly, not 'sorta, kinda'. The internet is plagued by enough security flaws and threats, we don't need more.

In the event he gets his back door or weak encryption by law, there's nothing stopping criminals from using systems that aren't part of the "broken encryption gang".

There's no conversation left to be had. There is only comics...

https://xkcd.com/538/
For me, its about not unlocking the phone everytime (i am used to screen locks) after minute (typical set duration) and log my stats. So I prefer pen and paper. What would be cool though is the ability to log my stats using voice input and that would be easier and more convenient as I am almost always with my headphones (with mic support). So, then I can simply say something like "exercise 1..set 2.. 12 reps.. 80 pounds" and it should log it. This will save lot of efforts to take out my phone and log workouts manually..
Probably attempting to prove ARS journalism isnt slanted nor impaired on account of their new ownership

They were recently acquired by new management as a result of peter thiel and hulk hogan successfully suing and shutting down gawker, their prior owners. Any time a news sit changes ownership theres likely some skepticism in the air over if journalistic integrity is preserved or not especially when it creates conflict of interest with an owner.
What do you use Mechanical Turk for? I'm curious as to how a service like can be used in your personal life
As I spent years working on billing for a world leading telcoms company I have to ask

What do you mean by "billing application" your q implies you want to input transactions into some accounting (presumably double entry) system?

Does not your Accounts receivable have a web frontend or an API? do you really need to build your own accounts receivable / invoicing system
Learning from “Support” Comments in the JQuery Source
I'm struggling to see how what you're saying is the opposite of what I'm saying – bleeding gums are bad, period.

You can be brushing every day and still have bleeding gums, probably because your brush is too hard but possibly because of bacterial build up causing inflammation. A dentist will do a simple test to check your gums and can tell you straight away whether your gums are ok or not.

My point being, bleeding gums are just not a good thing, ever. It doesn't have to mean you have gingivitis, you could just have nicked them with too hard a brush or whatever, but you should still look it up if it happens regularly when brushing or flossing.

And obviously you should brush at least twice a day, and also floss daily (full disclosure: I'm a hypocrite on the flossing, but I try to be better) – if you eat / drink particularly acidic foodstuffs you'd do well in brushing after ingesting this as well. Brushing after every meal can be inconvenient or even difficult (I don't always bring a tooth brush to dinner) but some sugar free chewing gums are a decent enough substitute.
>> The energy isn't wasted, it is converted.

The vast majority goes on hashing as fast as possible and getting the wrong answer many, many times... that seems pretty wasteful.
Well I hated the original DC but this setup works fine for me.

I am at a point in which muscle gains don't come easily but I'm getting great strength gains and nice looks specially when I get to train more than three times a week. Rest pause style training is pretty fun too and since I'm training with machines pretty exclusively I am yet to suffer an injury. The downside is that due to the lower volume I cannot get away with eating as many carbs as before. It can be also quite taxing if you go to failure (which is an integral part of the original DC).

I could recommend it if you're like me and for some reason you cannot spend much time in the gym, but I think for a natural that has the time a typical Push/Pull/Leg or Arnold split (Chest+Back/Shoulders+Arms/Legs) 6 times a week 2x frequency is the best.
What Are the Importance of PST Merging and How to Merge PST Files Manually?
Yeah, except people on DataHoarder encrypt their files so that the providers can't store one copy per unique file but have to store one copy per one file in any user's account.
Well that became a shambles fast
At some point you learn to debug the network requests in your own apps or websites. Once you've done that, it doesn't take a big leap of imagination to realise you can use the same techniques to look at the network requests for other apps and websites. Once you have enough sample requests and responses, you can usually figure out how it all fits together. Sometimes networking might be obfuscated (intentionally or otherwise) to the point that it's much more challenging, but the vast majority of products out there are easily inspectable.
First batch might get better terms than waiting till the company goes bust owing you pay
> We would get rid of some issues if we used a safer language, but the real issue is that we don't find the issues, the attacker does instead. So people are finding the issues, but why are not the people writing the software finding them?

Attackers aren't finding all the issues. They are finding issues in the small subset of software they actually bother to examine. That programmers aren't finding the issues I think illustrates both the effort it takes to always be correct as well as the different skills that are leveraged differently. It doesn't take a good C systems or application programmer to find a lot of the common C unsafety errors in question. It takes someone that knows the C memory model and has the knowledge of how to leverage that commonly. In some cases it takes someone applying new fuzzing techniques to expose certain edge cases more consistently that prior fuzzers did.

> That means you run the same tests, no matter the language, so in the end it doesn't matter what language you write it in.

The important point you are assuming is that the language (or current implementation of it) won't change out from under you in a way that makes that assumption invalid. See my other comment in this discussion regarding DJB, and the HN comment I link to for a good discussion about why that's so.

> And you chose a language that fits the problem, you don't make the language fit the problem.

In what case when you have two languages roughly similar in capability but one allows errors the other doesn't is the one that allows the errors the better fit?

> So I think your analogy of an airbag is wrong in some sense. The issue isn't weather we have an airbag or not, the issue is that we don't test if we have an airbag and then go "Whoops, the airbag didn't deploy in the crash and somebody died".

Then you're misunderstanding my analogy. The car isn't the program written, the car is the compiler. The route driven is the program. You may make an error on the drive, but let's let the car save us in those cases where it's obvious it can and should. Sure, making sure your coworkers check you've secured the pillows to the steering wheel before every trip works, but it should be obvious why that's sub-optimal in multiple dimensions.

> I work at a place where we have written code for 15 years, not only C code, or more without any remote exploitable holes.

I congratulate you on your diligence (sincerely, it is an accomplishment to get to the level where you feel you can say this), but that's a strong assertion in at least one possible interpretation. Perhaps you meant no remotely exploitable holes found? The interesting question that immediately arises from that clarification is whether anyone has seriously looked? Companies that care about this hire pen testers. I hope yours does as well.
UK plans age verification for porn websites from 2018
Surgical checklists have met (and are still meeting in some places) the exact same opposition, which pilot checklist also met when first being implemented.
I've read those safety standards and I disagree. They don't prescribe much that isn't standard practice. The only thing they require that isn't commonly done is very extensive testing or formal verification. They high expensive mostly comes from proving compliance to external auditors. You could have 90% of the results with 10% of the work by just testing your software very thoroughly but not producing all the documentation required to prove compliance to the standard. SQLite for example is at least as rigorously developed as SIL 4 software.
Very little appreciation for the fact that alternative or conventional at some point someone has to make the leap and try something unknown and see if it has any impact.
How the hell do you win on Product Hunt? Myths debunked
+1 If time is an issue I would first migrate to a C# (or even VB.NET) based desktop app, and then later (if needed) add a web front end with ASP.NET
Sure, I mean who gives you more than a 20% raise?

When you change jobs, you can renegotiate everything. More money, more holidays, less hours, etc.

Last time I changed jobs, I worked less hours and got 20% more money, my last boss would have laughed at me if I wanted this.
how high is the water in the glass ? capillary traction can pull water a lot ?
Lol I don't mean to sound mean but this is not how the world works
That assumes there will be no errors in the Rust compiler or runtime environment to deal with. If there are then those would definitely be above their pay grade.
These dudes are insane in a good way. Also, their earlier slide decks had more diagrams and even screenshots.
> Good luck with that setup if you are working in finance and something fucks up or there's an audit.

...don't most companies have a clear separation between (1) software engineers, whose job is pushing out code to cloud/servers/other-users (and who nobody should care what they use to develop that code that they push out), and (2) software users, who actually use the apps to push money/data around?!

If you're working in finance you're either in group (1) where you can use mostly anything compatible with security policies, or in group (2) where you can use ONLY what's whitelisted. If you're the rare snowflake sitting in both groups at once, then you just use 2 different separate computers.

And auditing only touches group (2) because they are the only ones handling money and real data, unless you're in a criminal case or something, where auditing would be done by computer security forensic experts anyway, who's by able to handle auditing the "exotic" setups of group (1).

And if somebody is auditing the tech side, they would be looking at git repositories, ci servers, etc. ...not the places where code is pushed from.
I've never thought about the medium thing. If you write a song (and perhaps perform it in public and everything), but never commit it into writing or recording, does copyright not apply?
It is best to assume that your IP address isn't private information.
Every single site you visit will see it because it's the 'address' to which the server's response is sent to.

What is the utility of correlating someone's IP address?
General location? Whether users share IPs?

This kind of thing is done by everyone. Social Networks and Ad Networks.

Have a look at this:
https://panopticlick.eff.org
Your web browser is likely to have a fingerprint making it unique across websites.
Sign up to one site with your name, then that can be easily correlated to you.
Rabbithole warning:
- https://github.com/sindresorhus/awesome
- http://popurls.com
As already posted in another thread for this GP, I completely disagree with the overall sentiment of this whole discussion that is throwing (modern) C++ (i.e., C++11 ff.) into the same bucket with (any version of) C.

What I can agree to, however, is that C should be your first choice if (a) you have to, or (b) because you like it and probably (c) because you are several times more likely to find a job if you know C as opposed to Rust or Go (unless living in very specific areas of this world - maybe...?). And then go learn Rust/Go/..., anyways :-).
I think you typify the type of manager that cares more about the bottom line than the value you get out of good employees.
Maybe it wasn't spelled out as clear in the article, but much of the point is that the employee is more valuable to retain than to simply re-cycle for someone lessor or equal pay.

Wouldn't care to work for you at all.
It may be beneficial to check what kind of URLs the job posters can submit as Job Urls, it's a popular attack vector
No, I'm doing what I would classify as "normal" developer work. Negotiation: I have had (on a sample size of 1) no luck getting this at initial employment, but I have managed (sample size of 2) to arrange it after working somewhere for a couple of years and building up trust and a reputation as an employee worth hanging on to. At that point I was able to get 4-day working set up following an RSI episode bad enough that I had to be signed off work for a few months and then got a medical recommendation for reduced hours, which my employer accepted.

Incidentally, this kind of thing is why I'm definitely not in the "job hop every year or two" camp.
A lot of people have complained about the lack / difficulties of Ruby Programs distribution. I remember the Authors of Vagrant said one of the reason why he switched to Go was that.

And this solves that problem.