skysight-inc/HackerNews huggingface dataset:
> And what are those safety guarantees? This is the part where I see a lot of handwaving.

I think this is the contention: correct me if I'm wrong, but you're saying, that, in practice, the safety guarantees of Rust are currently too nebulous to be able to be enforced reliably, whereas most other people in this thread are, I think, visualising the "platonic Rust"/post-RustBelt Rust where the currently vague conditions for safety have been tweaked as needed and proved correct, treating the current situation more like a "just" bug (and the success of RustBelt so far hints that this isn't vapourware/imagination, there's significant concrete progress towards it).

That is to say, most people are talking about the potential of Rust's safety, whereas you're talking about the reality, right now. I think both positions are reasonable to think about, but it obviously leads to confusion when the positions aren't distinguished in a discussion. (I also think that most people would agree with you about Rust right now: there isn't a definite set of safety rules, so it can be hard to work out whether "edge-cases" are correct or not.)
Facebook did innovate, i am pretty bullish with their tech right know and hope they can keep their momentum

https://code.facebook.com/projects/
I've said for a while now that they called it medium because it wasn't "well done."
"Real computation" is a flawed model because it does not permit scalable error correction mechcanisms. Check out Aaronson's lecture notes if you are interested in the rigorous argument.
If there is any point whatsoever to IT certifications it is to act as a minimum level legitimizer for those willing to acknowledge a lack of experience. Claiming certs have no value is to claim knowledge has no value.
Politics Is More Partisan Now, but It’s Not More Divisive
Like who? I have better than an IT background, I have a degree in software engineering and a couple of years experience and have never been seriously considered for an infosec position.
These people better not go to a CFA cat show if this upsets them
>>> I got the lyrics from someone in another prayer room in another city, followed by a message saying basically "Oh no! I shouldn't have sent it to you! It's copyright and we don't have the license to share those songs so don't ever share this to anybody!" The reason is that the original English author didn't authorise the translation, so what they're doing is breaking copyright and they're afraid that if they become famous, they'll get caught.

Covers are compulsory in the United States. The requirement is that you have to pay a certain portion of the profits to the copyright holder.
Which has no bearing on what she is saying at all.
Considering what we do to farm animals by the millions I don't think this cat is an opportunity to argue animal welfare.
How is it legal to repost them on the interwebs then? Fair use on the basis of quotation when reposted vebatim, and on the basis of parody when reposted with a funny caption on top?
I strongly disagree with this. Today, it is "think to program", but the computer is right there, it can help out a lot more beyond just interpreting the program you thought hard about writing. Instead, the computer can help us think, it might not be able to do the reasoning for us, but it can help us break it up into smaller pieces.

A nice analogy is the difference between Ultron, Hawkeye, and Iron Man. Ultron represents the singularity where computers just program for us; it will come someday but it isn't very interesting to us. Hawkeye, the "super" archer, is analogous to the programmer with advanced abstracting reasoning skills, he is amazing, but there just aren't going to be too many of him. Humans aren't getting much smarter in general.

Then there is Iron Man, who makes himself awesome by using technology, from his power suit to his holographic design environment and interactive voice assistant. That is the sweet spot for us.
US state citizenship discrimination on the basis of DNA
There's way more than one type of curry and more than one way to enjoy a spice. For tumeric, fry some pulled aubergine with tumeric, garlic and tomato, for example.
How did you apply? Which companies? How did you fare in the interviews?
The interesting thing is that a perfect analog classical computer is more powerful than the qubit quantum computer model (which is what people mean by quantum computing). But analog computers (whether classical or quantum) do not permit error correction, and as such are useless for anything but the smallest problem. You need bits and qubits in the real world.
Scientists clone monkeys using technique that created Dolly the sheep
A non-obvious drawback of this is you give up multi-threaded compression (maybe fixed in a later release). You also need to use the same memory size when decompressing.
So this opportunity will ~never come again, but if any memers are looking to confuse or annoy older programmers, I made something special for you: https://github.com/strayptr/memes

(I wonder who that Lambda is?)
Anyone else notice the name tags on the employees? Vint (Cerf) and Robert (Kahn)!
While the approach you suggest usually works well, it doesn't in this case: FILE_NAME_INFO[1] uses a "flexible array member"[2] (although not the C99 version of it), of requiring a dynamically sized character array in the struct's allocation, and writing directly to the memory after a struct instance. The 'WCHAR FileName[1];' field at the end of the struct is just a placeholder to allow easy access to that character array, the length 1 is a lie.

[1]: https://msdn.microsoft.com/en-us/library/windows/desktop/aa3...

[2]: https://en.wikipedia.org/wiki/Flexible_array_member
Bret Victor's group is still going (they got their own funding); I believe John Maloney (of Morphic/Etoys fame) is also still going with his own funding. The rest of us are all gone...
The function in question takes a pointer to a variable sized buffer that only starts with a struct. So your alternative won't work (the declared size of the struct only has room for a single character of filename). And there are certainly instances of this pattern where you really need to choose the size of the buffer at run time.
I didn't realise I needed to learn about this today.
You’re probably reading an old document - this restriction was removed with the introduction of roles. https://downloads.haskell.org/~ghc/7.8.4/docs/html/users_gui...

Roles were introduced in 7.8.something, and GND was added to Safe.
I'm a "software engineer", but I know a plenty of other "software engineers" who know less about TCP/IP than IT people I know. What about being a SWE makes you feel more suited for the job?
I can pay 100% of the profits to the copyright holder! I'm not making any money, so 100% of zero is still $0. The whole thing is fan-made.

But the prayer rooms are arguably a "public performance", and that comes with even more complicated licensing issues.

I'm trying to contact the original musicians, but Hillsong and Bethel don't answer their email - they redirect all enquiries to CCLI, who don't operate in this country.

So there's no way to pay to make it legal.
This is not a refutation, but I thing it's important to point out that Tardar sauce (aka Grumpy cat) is a cat with dwarfism and an underbite, rather than a disgruntled cat.
> They’ve been fumbling left and right trying to figure out how to make Medium sustainable, and I’m just not convinced they’ll always do what’s best for us and our business.

This is the risk of becoming dependent on any outside service or company for your critical business activities.

SaaS services make your life easier... until they stop working the way you want, go out of business, get acquired and shuttered, etc. etc.

Pick and choose wisely. And always have a backup plan!
After? I read it as during. That may be just another way of saying he considered giving up hope (I can’t find the article online, but I think it is more likely he considered stopping to try and maintain fetal position than slicing his wrists, for example)

From what I read, keeping up hope is a huge factor in survival.
A JavaScript NES emulator
The whole thing where people insist on copyright for worship songs has bothered me for years. I understand that composers and artists need to get paid, and I'm certainly fine with enforcing copyright for recordings, but the whole idea behind this particular style of worship music is that the songs are easy to memorize and teach orally. It's one thing if you're, say, dc Talk and people learn your lyrics because they're listening to your albums a lot, it's quite another if you're, say, Hillsong and you go out of your way to write melodies and lyrics are easily learnable, and then you (or your agent, I guess) says that you may not distribute written copies of the lyrics.

I've sort of wondered whether writing a bunch of Creative Commons-licensed worship music and trying to make it popular would be a good way to solve this problem.
Ok I took a sample. https://gist.github.com/kballard/636fa3f6c09d6fc6e2a2a1efa33...

I also checked the Console. Here's what I found:

default	19:55:42.767418 -0800	RetroClip	GVA info: preferred scaler idx 1
default	19:55:42.769327 -0800	RetroClip	AVD encoder error: kAVDPictureEncode CreateContext, unsupported resolution 5120 x 2880
default	19:55:42.808188 -0800	RetroClip	Using metal device <BronzeMtlDevice: 0x7f80bf037200>
name = AMD Radeon R9 M395X
default	19:55:52.609993 -0800	RetroClip	LSExceptions shared instance invalidated for timeout.
Paper detailling the "as much as 40%" figure that Asa Dotzler mentioned: http://www.ieee-security.org/TC/SPW2015/W2SP/papers/W2SP_201...
Ask HN: Where do you find great remote developers?
I'm curious how people find excellent remote developers. We chose to make our company 100% remote in large part because we wanted access to a wider range of developers from all over the world. The trick of course is you have rely to a larger extent on advertising and methods that can't take advantage of your social networks.

Are there any places you've found particularly effective for advertising? Any other tricks or best practices you've found effective and finding and retaining great developers?

Thanks!
This is precisely why we have tuned our hiring process to find people with no infosec experience but a strong technology background. If you come in understanding, fundamentally how computers work (at a systems level) and a genuine interest in information security there limited barriers.

Most organizations are not equipped to hire for one-of roles on dev teams involving information security.
Save OneNote Document to HTML Stream with Embedded Resources in Separate Files
It took me ages to figure out but there is a solution to this NYT website fubar that works for me on desktop browsers.

In Chrome this appears to be due to the Times site responding to 'touch events' when the browser reports that the device is touch capable. When the device is touch capable the double-click-on-a-word is interpreted as a zoom attempt of sorts. And right-click doesn't work either. Even if the input was with a non-touch mouse (Or maybe they're assuming everybody is using a Mac Magic Mouse always).

If you disable the touch-events-api in Chrome (chrome://flags/#touch-events) then Chrome will not report that the device is touch capable. And the NYT website will respond normally to the normal mouse interactions. This has been working for me for the past year.

As for why Chrome might be claiming your input is a touch-event ... for my situation, my best guess, so far, is that this happens since the laptop has a touchpad. (My laptop doesn't have a touch-screen.) So even though I actually used an external USB mouse to interact with the browser the browser seems to report that the device is touch capable which the NYT website interprets as must-be-touch-only-always.

Firefox has a similar setting called "dom.w3c_touch_events.enabled" I believe though I haven't tried this with FF.

Hope that helps.
Tokyo in general pays less than America or even China for software engineers, just be warned. If you are at Google, you can see if you can work in their office there. Facebook also has a Japanese operation, but most of it is localization rather than worldwide R&D. A friend of mine worked as a designer for Phillips for a few years and enjoyed it, but I don't know of many engineers who did the same.

To be honest, if you really are that senior, it would be much easier and financially rewarding to work in China if you are interested in Asia.
Orphan Block's Guide to Upcoming ICOs in Q1 2018
Wow, I just learned that I despise the prefix "ur-" far more than is reasonable.

Seriously though, why not call it "tribalist"?
Fun fact - tumeric was the trigger for India creating a patent fighting engine around Indian traditional medicine (Ayurveda and unaani) including a gene bank and international legal force around biopiracy.

We now have something called Traditional Knowledge Digital Library (TKDL) - http://www.tkdl.res.in/tkdl/langdefault/common/Home.asp?GL=E...

http://www.mondaq.com/india/x/586384/Patent/Traditional+Know...
Maybe the neglected catastrophists of the 1940s are about to see their day. At any rate, the following article cites -many- sources as regards the 'Alaskan muck'.
https://steemit.com/velikovsky/@harlotscurse/in-alaska
Except that in fifty years, the AI's will be able to touch up your photo a lot better as well.
On the other hand, Dijkstra also has this quote which suggests he is not too fond of "mitigation" either:

"If you want more effective programmers, you will discover that they should not waste their time debugging, they should not introduce the bugs to start with."
@mkl If you use Chrome desktop then see if my above post helps .. without the need for extensions/plugins.
The advice is pretty good overall, but the excessive profanity is unprofessional and distracting.

It is interesting that he values "SANS" certifications, but not the courses for them.

Besides my own rambling[1] you might find these resources valuable instead:

* https://tisiphone.net/category/security-education/

* https://krebsonsecurity.com/category/how-to-break-into-secur...

* https://s3ctur.wordpress.com/2017/06/19/breaking-into-infose...

[1] http://dfirnotes.net/ etc.

hth,

adric
Bought it just now.
One thing to note is that at least in the US, the compulsory licensing scheme for recordings of covers involves paying a fixed amount per copy (a couple of cents), even if you charge nothing at all.

(Also, it doesn't apply to things that aren't recordings at all, including live performances, as you say, or written or electronic copies of sheet music / lyrics.)
Yeah I think I'm going to stand by my "It's Pepsi Cola, not Sesame Street". Do the optics look bad? Oh well?? Why is anyone looking for positive optics coming from an advertisement paid for by billionaires featuring the sibling and daughter of millionaires on a commercial that cashes in on the features and 'optics' of a group of people that are one astronomical unit away from being millionaires themselves?

It's Pepsi. Not Sesame Street. If you looked at that commercial expecting a message full of deep moral conviction on the state of affairs that exists in the space between the citizenry and the constabulary, you got played, son.
people seemed lukewarm on the original ShowHN (https://news.ycombinator.com/item?id=7869726) - I guess the lesson is to not get too discouraged if initial feedback on a project isn't as amazing as hoped
Bacteria are pretty selectively bred by humans too :P
I'm not sure why you wouldn't spend money in a burger king as a vegetarian. They are one of the few burger chains that offers a vegetarian burger. If you ask for a veggie burger in Wendy's they'll give you a bun with lettuce and tomato. If you ask in a McDonald's they'll just laugh at you.

Don't get me wrong, Burger king is absolutely disgusting food no matter your dietary restrictions. But at least they try.

Also their advertising campaigns make me want to smash my TV, Alexa and computer.
Guess I should invest in their stock in case they do announce something crypto related soon, it's only a matter of time before they read your comment and take the idea
> unless you just don't use pointers or references at all (and refrain from using any library that is not safe which includes large parts of the standard library like all the containers)

It may seem far fetched, but it might be more practical than you'd think. The SaferCPlusPlus[1] library provides memory-safe implementations of the most commonly used standard library containers, and pointer types that reflect the lifetimes of their target objects. That is to say, there is a practical subset of C++ that is more closely comparable to safe Rust than is conventional C++.

[1] shameless plug: https://github.com/duneroadrunner/SaferCPlusPlus
Grumpy cat generates and sustains jobs: photographer, the community manager, agent, advertisers, the t-shirt people, and an army of people working in the various products going from books to calendars, the movie cast... you get it.

It also helps people release stress, which improves their immune response.

Grumpy cat is a force for good.
Or a good cavity or two.
How can you get any work done without a stakeholder telling you what to do, and various managers running around tracking every thing you do and constantly inviting you to meetings?
I am not able to click any story :(
So you don't believe in the legal system?
In my experience knowing about TCP/IP is not required depending on the individual's background (say, graphics driver developer). It just turns out most good hackers tend to be curious and either learn it very quickly or already know it.

We like software engineers because they can synthesize complex software architectures, whereas someone with only networking knowledge will be at a much larger knowledge deficit on most software focused assessments.

Infosec has trended toward application focused security for many years now.
> Let's say a true predictor is causal.

That's your definition. "Causal" is well defined, "true predictor" isn't. Let's adopt your definition for the sake of argument ...

> age causes defects, smoking causes sickness, alcohol impairs

Age is correlated with defects but does not directly cause it. Some people at 40 have less "age related defects" than other people at 30.

Smoking causes sickness, but is also correlated with less obesity, and -- in the minutes/hours after smoking, is correlated with being more alert (possibly caused by a nicotine response, I don't remember the biology).

Religion _sometimes_ causes behavior, the only thing you can say are that they are correlated - the vast majority of Jewish people I know are NOT observant, and yet - over the general population - it does correlate with less time on the roads even for the general population.

Yes, it's a proxy, but so is age, or "time since you got your license" - Some new drivers are way better than other drivers who have been driving for 20 years.

Whether it works only because of (no) transparency is up for debate - my great uncle could not switch from AOL to gmail on his own without my help, and does not want to. He might want to if he knew it saved him $100/year in insurance costs, true, but it would cost me time in support costs (gmail is easier; but he's been using AOL for over 20 years and it's hard for him to change his ways).

> As such I don't think it's ethical for two different reasons.

I don't think it's ethical either. And I would thus like it to be made illegal - because, statistically speaking, right now it is likely[0] a good proxy and predictor for a lot of things, and therefore as long as it's legal it will be used.

We have "blacklisted" other things, like race -- e.g., in the US, unfortunately "skin darkness" is a good predictor for the question "having spent time in jail" (about 10% of black people vs. 1% of white people). It is illegal to use as a predictor -- but it turns out that other "legal" predictors such as "lives in a high crime neighborhood" correlate strongly with "skin darkness" and ARE used to determine sentences.

The right thing, IMO, is to whitelist acceptable predictors, not blacklist unacceptable ones because you can always find proxies for the unacceptable ones, and it is easy to game one of those proxies, but hard to game 20 of them at the same time. But that's an ethical, legal and philosophical debate. Statistically, proxies are sound.

[0] I have no access to real data, I'm just assuming for the sake of argument
SANS certifications are the only ones I think hold any actual water. People tout the CISSP like it teaches you anything but the very basics and use that to call themselves professionals, which is a huge red flag in hiring.
I disagree with Aaronson but am not quite there to have a serious discussion about it.
I claim only that the ends are just, not that they justify ALL the means. Thanks for the link - I learned something today.
A judgement against someone else is a civil affair, not a criminal issue. Law enforcement officers enforce criminal law as a matter of course. In a lawsuit when one person owes money to another due to a judgement, that debt is private and you have to bear the costs of the state in enforcing your debt using law enforcement officers.

Just like police officers at a concert aren't staffed for free, even though their only purpose is to enforce the laws and/or facilitate traffic. You could argue that enforcing those laws and facilitating that traffic is their job, but those putting on the concert are creating the need for extra law enforcement and want them on hand, so they have to pay.
Other great writing books:

- Writing Down the Bones

- Bird by Bird

- On Writing Well (nonfiction writing only)

- The War of Art

I generally have tried to follow the feedback of writing consistently, even if you don't feel like it. Stephen King mentions how he would allow him to just sit at his desk without writing if he wanted, but that he always would set aside the time and not do anything else.
A lot of people report a huge improvement in their acne after cutting out dairy. Drinking cow’s milk in large quantities is something humans have only been doing for a few thousand years and there’s quite a bit of evidence we probably shouldn’t.

https://nutritionfacts.org/video/the-acne-promoting-effects-...
I hear you guys, and agree. I find it pretty sad that these days when something novel or cute appears, people's first thought is to copyright/patent/trademark it, hire a PR firm and branding expert, and MONETIZE! I was in the grocery store with my 5 year old daughter and she was singing one of those ridiculous nonsense songs that 5 year olds sing and some lady said, "Dad you should put that on Youtube, that'll totally make a few bucks for ya!" How about FUCK OFF, I'm not monetizing my daughter. Have we lost all grip on reality?
> In the analogue era the rule of thumb was that ads could comprise no more than 33-50% of TV or radio programming, or of a magazine’s pages, says Rishad Tobaccowala, of Publicis, an advertising firm.

My tolerance is way lower than that now. Commercial TV is basically unwatchable, as is commercial radio. The internet is pretty horrible without an ad blocker. Anything more than 10-20% advertising just gets turned off immediately.
What this post doesn't explain well is the benefit of using ECS rather than just uploading a docker image to an EC2 instance and running it.
i would watch an arbitrary amount of interview w/ Ted Nelson :)
Wish it was for Hyperloop research and implementation. We did pass a proposition for a $40 billion high speed rail system in 2008. Musk started thinking about the Hyperloop concept because when the plans for the California high speed rail came out, it was the slowest and most expensive high speed rail system on Earth. A decade later, no trains are running and the cost is up near $100 billion (who really knows what it would cost?).