skysight-inc/HackerNews huggingface dataset:
> what is "safe" code without a guarantee of memory safety?

Memory safety is the absolute minimum for safety critical code.

It seems to be surprise for most people that you can write memory safe code in C and check for that statically and that includes static stack and heap exhaustion checks.
Exactly. A hand-waving methodology means nothing when the people like what they do and they're professionals -- maybe even friends. I've witnessed that in both semi-agile and semi-waterfall teams.

So yeah, I agree. :)
I'm neither Japanese nor Korean so I can't really speak for either culture, but Japan and Korea are not England and France, and they don't necessarily view themselves the way Westerners view them.

[0]https://www.japantimes.co.jp/news/2016/05/07/national/media-...

[1]https://www.vice.com/en_uk/article/gq8y87/japan-racism-zaito...
As a kid who actually used to boot from linux, delete the "internet security product" from program files, and then happily access the internet, I think it's a great idea, to train your kids to always find solutions.
Russian hackers stole NSA files after identifying them using Kaspersky software
Puerto Rico is not one of these extremely underdeveloped economies where the only work is in tourism. In fact the pharmaceutical industry is facing a bunch of shortages since PR is a major manufacturing hub for them.
Why not get it delivered to work?
Not in my case.

$:~/projectes$ git clone keybase:// [uri]
Cloning into 'something'...
fatal: I don't handle protocol 'keybase'

I'm on an ubuntu machine. What can I do to solve the problem? Keybase version 1.0.34-20171006000413+5fe91ae13
Is this a way to have non-blocking reads from file system? For regular files O_NONBLOCK does nothing, so one has to use thread pools. For plain files served from local disk it's usually not worth it. But files can be served by sshfs, nfs or something more exotic made with FUSE.

If I understand this correctly one can use RWF_NOWAIT to do what one would naively expect from O_NONBLOCK. Am I correct?
>Yes, you can dig your way through the Chinese and Mexican restaurants to find good, cheap ones, but it requires real persistence.

Or, you know, just talking to a local who has already done the legwork
I think Set is quite an interesting game, playable by adults and kids alike. I've written a blog post about the odds of not finding a set among the cads on the table. I'll link it here in case somebody is interested:

https://henrikwarne.com/2011/09/30/set-probabilities-revisit...
The article just focused on Uncle Bob's asking for "unit tests" in "Tools are not the answer". But I believe Bob just asked a rhetorical question over there. If someone is not writing unit tests at the very first place, he doesn't need to ask any other kind of tests furthermore, which are likely be less and less people raising hands.
The odds are good but the goods are a bunch of jerks.
That's not hugely surprising. If a company seems chaotic and mismanaged from the outside, it's probably worse on the inside.
Article is from 2014
There's a world of difference between SFII and its successors on one hand and all the efforts that came before on the other.
something like this?

https://imgur.com/a/wRtfp

NB: the icons beside your name are for "model", "traffic", "acquired" and "phd"
Spotify Threatened Researchers Who Revealed 'Pirate' History
And, it may be worth mentioning that Japan is more tolerant of immigration than asylum-seekers. Often, when Japan's refusal to accept refugees is held up as an ideal, the fact that not most foreigners in Japan aren't refugees seems to be overlooked.
Though I wish it was communicated better, I don’t know how they can do it. It’s good to know the difference.

I love this feature. Fringe wifi areas are where I turn wifi off, and often I’m not turning wifi back on. It affects cellular data consumption, location accuracy and also the battery.

I don’t understand how is this affecting the security of the device.
> I agree it's not a huge security vulnerability

Until the next Broadcom WiFi radio vulnerability.
Don't forget that numpy was initially a MATLAB competitor, and that we are all a lot better off for it :)
> I wonder what the actual cost-difference would be to pay 7 guys working 2-hour 5pm-7pm days instead of every one guy working 14-hour days.

It's less about the guys, and more about the support infrastructure required for more delivery vehicles (even rented ones via the guys' salaries), insurance, more loading bays to get 7x more vehicles ready, more loading staff (or robots) to load 7x more vehicles, etc.
I wonder who will use these types of instances?
Batch Control Systems for Chemical and Pharma Industry
Formal methods, in theory, don't eliminate errors. In practice, though, they do, as dramatically demonstrated by fuzzing CompCert C compiler.
Yes, we run our own SMSC but in terms of functionality like routing and quality control we go way beyond what a normal carrier would be able to. CLEC is a US specific term and not needed to sign direct agreements with carriers. We operate our own SS7 stack, global titles and mobile network codes. This way we can interconnect with carriers as a carrier. Deploying an on-premise SMSC or E1's would be an old-school way of doing this. Most carriers use either Sigtran or connectivity through their SCCP provider.
I honestly wonder why did Google cite "SAP HANA" as the _reference_ workload for such setups. I never heard of that product. Noobie asking here, is it the _reference_ workload for such setups ? And are there more demanding workloads ?
It is always amusing to read pieces like this or comments by those who either cannot understand or dislike it.

Here's the simple truth: there should be no such thing as an excellent, inexpensive restaurant for more than a flash in a pan. Why? Because if a restaurant is excellent and is inexpensive, then it underpricing its offerings the same way as an excellent software developer making $50k a year should not exist in Bay Area for longer than a flash in a pan because that software developer is underpricing his offerings.

Say I have a successful restaurant. For the sake of the argument it seats 40 people and does fixed price brunch and is only open between 11am and 4pm on Sunday. Brunch costs $20. It is amazing. I have a line out of the door. People wait for hours for tables. What should I do? Well, it is simple, I am going to raise a price for $30. Am I still packed? Are people still waiting? $50 it is! Holy crap, still a line? $100! I'm charging a hundred. Oh look, the line is smaller but I'm still doing the same number of covers I did before. $150! I really have no line but the number of covers now is right around what I can do. Excellent. $150 it is.

What does it mean? It means that before my restaurant was excellent, inexpensive and mispriced. Now it is just excellent and priced correctly.

Lets try it again: same setup. $20, i have a line and a wait list, and people outside clamoring for the brunch. Ok, I raise price to $30. Line is gone. I'm doing as many covers as before but there's no real line. I decide to hold at 30. Two months later I have half of the tables empty because people moved on. I drop prices to $20 and nothing changes. Still half of the tables are empty. What happened? I discovered I did not have an excellent and inexpensive restaurant, I just had an inexpensive restaurant and as soon as it tripped into not so inexpensive category it was over.

P.S. There are tons of cheap eats in Bay Area and SF. They are just not the kind of "cheap eats" that the people who make $150k/year like to eat.

P.P.S. Comment of the owner of the restaurant that tech companies are taking away the talent because they pay more, give full benefits and have 9-5 schedule is pure gold: pay. more. money. That will solve the problem. The owner do not deserve to make money for her services any more than Jack The Dishwasher deserves to make money for his.
Sorry you're right I was thinking of salary of Stanford undergraduate first job in Bay Area versus stanford PhD student .
I think there needs to be more information present on the site - the about/home page doesn't show anything other than the most cursory information, and I think you'd want a lot more than that to convince most people to try it.

I may give it a whirl this weekend with my kids, but I'll see how it goes. The issue with most of these strategies is that kids are generally good penetration testers in their own (limited) way; if one means of accessing the internet is blocked, they'll use another one; given that they have access to different devices and no universal management system, I think they will just flip to another device.

Don't get me wrong, I think things like this are a useful tool in the arsenal of a parent who cares about their child's upbringing. I always find it slightly depressing when I see comments such as "this isn't a replacement for being a real parent", etc., which always seem to come with the subtext of [like i am] to them. I don't think anyone who would care about this sort of thing would think it was a replacement. I'm a step-parent to 4 kids (18,16,13,11) and it is a difficult task to get them onside in terms of what I see as responsible internet usage (which increasingly comes down to not only time, but the kind of sites and apps they are using), and most importantly what's easiest referred to as 'screen time' - games, etc. As mentioned above, if you do manage to lock something down in terms of time, then they'll use something else. And I really care about this, but it's a difficult thing to police in terms of actual effort, attention and also expectations. I don't think it's healthy for them to spend all their time on any kind of device, so we go out for walks and do activities when we can, and Sunday afternoon until Monday breakfast is no devices for ANYONE at all (Us included, which has been a real success after the initial resentment and whining), but often real life or work gets in the way, and having a way of enforcing limits of usage or actively promoting worthwhile usage to gain credits for trivial use would be a good thing to do, IMO.

But I'm yet to see anything which comes close to doing it; I did have a router running Gargoyle a few years ago, with each device in an appropriate group, and times enforced, but it couldn't handle that many reservations and crashed enough to make it more trouble than it's worth. That's compounded by the older kids having their own phones with some (limited) data plan, which can of course get round any restrictions. Promoting a 'stop using your device an hour before you go to bed' can be wearing, no matter how good your intentions, and how pleasant the kids may be.

In short, unless there's a universal standard for this, and everyone signs up to it (across all manufacturers and devices), I think it will have limited success, alas.
Also in Germany, I much prefer Amazon Logistics. If I’m not home, they’ll leave the parcel either with neighbours (multi-tenant house) or just in front of my door with them taking the risk (and they’ll happily send something again if it gets lost, happened twice so far). This way, I essentially always get the parcel the same day it was supposed to arrive. With DHL, they often don’t ring the bell, put the parcel back into the van and then put it in some post office (available from 2pm the next day), the office open from 9am and 5km away from my commute. If I allowed DHL to place them at the door of my flat, I would have to take the risk of someone stealing it.

The fact that one particular DHL driver routinely unloads his parcels onto the cycle lane every morning doesn’t help my opinion of that company either.
That is called programming. It works better with a simple language instead of English.
I think that's generally true for all things in life. Like Chris Rock once said, if you have to go around tell everyone that you have a big d*ck, chances are you don't.
The problem is the education.

Many people think their only option is to slave away 9-5 in an employment and let other people create the visions, while basically everybody could be a bit more like Musk.
> when I buy online, I almost always get (and search for) free delivery

Me too, but that's mainly because the more expensive options are worse, in my experience. For example, "free" delivery by mail into my actual mailbox vs. "premium" delivery with a parcel service forcing me to be at home an entire day on which they might come by. I would pay extra for a premium service if it were actually better.

(Agreed with your LOL at the downvoters.)
The latter case; and allocating anonymous memory is not caching.
Check digits are not an isssue because it’s too easy to gain access to real numbers in the first place.

We don’t have a problem with people providing technically invalid (I.e. never issued) social security numbers, only reusing ones that aren’t theirs.
Gal was already famous from the Fast & Furious movies.

Personally I would have cast Ronda Rousey as WW but Gal did a fine job and I am looking forwards to the next instalment.
Another tutorial for writing a Forth interpreter in assembly (Part 2)
It's hard to build your consultant image by telling people that multiple methods and tools might work. It's easier to market a simple cure.

Also, the point to "stop making shitty software" is not the same as "stop making mistakes". You can ship high quality software even while being human, it's just slower and more costly.

And while I agree with the article in general, I do believe the current balance has shifted towards too fast iteration and shoddy quality. Just look at the recent iOS/OSX releases. But even that might make business sense, because of the even shittier alternatives.
As someone who goes out a lot and who was courted to move to SF by people who go out a lot, I can tell you that in 2015 SF restaurant scene does not hold a candle to NYC. It was one of the reasons I decided not to move to SF.
>People in Italy were always kind of surprised to hear about US newspaper machines - the ones where you put in some coins - and you can take out as many newspapers as you want, essentially

Honestly, I have no idea why those things even exist or how they make anyone money. It's baffling.
Introduction to Statistics with Gonum – 0xb1ns go run
It would be good to see some more information on your landing-page that would convince me to become a member.
When you connect directly to a carrier you get so called PTT codes back (industry standard). Not all carriers do this the same way but we standardize this and return them like shown at the link below. When your provider uses a lot of in-between providers its harder to return errors correctly. https://developers.messagebird.com/docs/smserrorcodes
This latest article about Detroit developers seems to support that [0]. A meager $300K dished out to politicians opened up the possibility of $700M-$1B plus the developers of these buildings can collect income tax from businesses and folks who occupy them for the next 20 years.

What's the now?!

[0] https://www.metrotimes.com/detroit/how-dan-gilbert-just-scor...
> C/C++/Ada

One of these things is not like the others,
One of these things just doesn't belong,
Can you tell which thing is not like the others...?
Arduino Announces ARM Partnership
It's not memory safe, but with some good practices and library support it's in a different league of safety compared to C. Just the availability of smart pointers, vector array and string puts it waaay ahead of plain C.

The bugs in dnsmasq were buffer overflows. In this case, the good practices would be always use std::array and std::vector and index with "at".

Tackling UAF is more complex. It involves using smart pointers exclusively with a runtime-check on dereferencing. This will result in some performance loss.

P.S: I'm not saying it trivial to secure C++ code, nor that every project out there is using these techniques. It's a worthwile task to try to make existing C++ projects as safe as possible, and that's an effort parallel to Rust which should have very beneficial results.
in convex optimisation, often machine learning, gradients (partial derivatives) are used. In deep learning an approximation of the chain rule is used in backpropigation.
Build a tiny cloud for demonstration purposes with Raspberry Pi’s and UP boards
Yes - we run our own network of real sims for quality control that we only use for ourselves.
according to https://transparencyreport.google.com

"No unsafe content found"
Site info" This info was last updated on Oct 6, 2017.
3 Reasons Why You Should Quit Your Job
They'd need to maintain seven trucks instead of one truck, with the much larger support system that would entail. Also they'd need more people working internal functions like HR due to the higher headcount. It's a lot more expensive than just the driver's salary.
I guess because SAP HANA is an in memory database which requires, well, a lot of memory. Other providers use HANA as a reference as well.
Aklien
according to https://transparencyreport.google.com
"No unsafe content found" Site info" This info was last updated on Oct 6, 2017

Check your ISP
Aww. Unmaintained. I desperately want a slim debian-based image I can use in place of alpine (Nothing against Alpine, I'm just a deb-head at heart.)
price per second?
Implementing a "Built-in Terminal" mindset is what is wrong with VSCode/Atom etc. You already have a terminal emulator installed in your system, and you can tile the windows if you want a terminal right under your editor.

NIH syndrome of re-implementing everything under one roof is not really required, since we are heavily utilizing desktop environments for the past couple of decades, which allows you to put separate applications in one screen.
AWS do the same: https://aws.amazon.com/ec2/instance-types/x1/

Interestingly, AWS have X1 and X1E-class EC2 offerings, two of which are significantly larger than this new Google offering.
lol - thanks :)
Nobel Peace Prize to International Campaign to Abolish Nuclear Weapons (ICAN)
Where Amazon Is Failing to Dominate: Hollywood
PyCharm 2017.3 EAP 4 Out now
It’s odd how you are trying to misrepresent and confuse other people about the truth.
But only Haswell, where GCP offers Skylake
Does someone have experience using this (or other) cloud solutions in a scientific HPC context? The only obvious disadvantage I can think of is that every student running something incurs a certain cost whereas after one has bought the actual computers, running jobs is somewhat free.
The Document Foundation Announces LibreOffice 5.4.2
Holy moly!
<sigh>

More nihilism, this time in programming circles.

It's a turbulent age. I can't wait for it to pass.
Maybe because SAP HANA requires vertical scaling. For horizontal scaling, I don't see a point in using such big instances.
I'm usually pretty skeptical of Uncle Bob's stuff, but in this case I think that both Hillel and Bob are a little right. Tools do make a difference, as Hillel says, and can be used to mitigate risk. The key word there is mitigate, though. Bob is right in that the root cause of that risk is a lack of discipline. Such risk will persist, mitigated by tools or not, so long as that lack of discipline persists.

I think that "discipline" is a bit of trigger word for some folks, though. It can be seen to imply a personal failing, but as Bob's post explains "undisciplined" programming is usually a combination of personal and systemic problems. The programmers who created the hypothetical bad code shouldn't have created it, but they also shouldn't have been asked to, or placed under requirements that made bad code, over a long enough time, inevitable. You can have undisciplined cultures in the same way as you can have undisciplined programmers, PIs, requirements, or problem domains.

What's more, all of those are problems that it's important to be aware of. If anything, Hillel's article pushes a bit far (understandably) in the other direction, hinting that a failure of discipline is so inevitable as to be a waste of time to fight against.

It's important to do both: mitigate the impact of failures caused by lack of discipline, and understand and try to address the causes of that lack. Easier said than done, of course.
No it's a normal cellphone number
I had a few 36 hour workdays this year. People thought I was crazy for doing so and they were right.

There’s very rarely any benefit in trying to work when you’d usually be asleep.

It’s arrogant to believe one could work 16+ hours without any productivity gains being significantly offset over the following days.
I have a lot of respect for EFF but this time they just do a blind hate.

Many people forget to re-enable Wi-Fi after they turned off due to a spotty connection. This feature saves them money.

The security-minded users have zero trouble going to the real control panel -- it's quite honestly one Home button press and one one tap away! -- and do the real disabling of Wi-Fi / Bluetooth.

Come on. This is not a grand conspiracy. It's an attempt to make all sides happy. I agree it could've been communicated better -- that's very obvious -- but everything above that is just Apple hate.
I'm on an iPhone 6, before 3D touch was introduced. Usually a long press is equivalent, but not here apparently. I just cannot get to this setting.
scientific computing and simulation.
I have had need for machines like this - for a project that was very compute heavy but embarrassingly parallel, but also was very "chatty" - I.e updated the data structures a lot during compute

I can't be too specific about it, but if involved creating a very large tree structure and updating, pruning and transversing the tree a lot

If the algorithm is updating and reading a large data structure a lot it's only practical from a speed point of view to hold the whole structure in RAM
Let’s Encrypt uptime is 99.9% – or 98.8% without defects in 2017
The dominant model was price per minute, rounded up. Price per second is better for groups that spin up and spin down instances often.
Purism Librem 5 has surpassed $1m in its crowdfunding campaign
PSCX – PowerShell Community Extensions
If you can afford SAP you can afford these instances. I think it's a form of signalling to enterprises that the cloud offerings are suitable for them.

HPC people are much technical and less conservative, in general, and can sort themselves out.
Waste-generated biogas is turning homes into power plants UK
I wonder if public-key crypto enabled ID-cards for example would be a good idea to solve this problem.
95% of the time I consider Ashley Judd a complete wackadoodle.

But this time, she speaks truth to power and attacks a real root of the problem. For this, I applaud her.

Real progress can be made if we disregard politics and band together to let people know we actually care about what's right.

Next stop: Bill Clinton, then the Republican "get an abortion" congressman
well I'm not against using transactions, I'm using them a lot.
But I most often I read data on other threads where I do not need a transaction, especially for validating data or just getting data there is not the biggest need for transactions. And especially if your data can be dirty (not 100% accurate data)

basically yes you need transactions to guard against dirty reads, but most often you don't care for dirty data, because if you are not having financial data or data that needs to be taken with care, let's say you have a timeline with posts, you don't care if the last read was dirty and probably the user does not care anyway, he will just refresh the page once he needs more up to date data.
>The "ft" in modular_raft should convert to a ligature so (I assume) it will then take one character, instead of two

It's not about those kind of ligatures -- but about special programming fonts with programming-oriented ligatures (think >= etc).

Those still can affect code alignment, but there are people who are against manual alignment anyway.