skysight-inc/HackerNews huggingface dataset:
"And here’s why I don’t think the Sapir-Whorf hypothesis fully applies to programming languages. When we program we categorize the world in English (or Spanish, or any other natural language), and then we encode that into a program. So the programming language I’m using, is not limiting the way in which I see the world."

I agree that programming languages and natural languages are different. That being said, programming languages do meet the definition of languages bc they communicate structured information.

Example: "if x < y { string z = `${x + 1}` } else { string z = `${y - 1}` }" . This short program communicates a structured piece of logic with clear meaning. It's not all encompassing, but then, neither is a English.
typedef struct {uint8_t *data; size_t len;} ByteBuf; is the first line of code I write in a C project.
Many comments here just sound too enthusiastic as well.

I suspect something fishy is going on (as in, paid for upvotes and comments).
Glad you like the Student Developer Pack. All credit goes to the 100+ partners who provide something like $200k in tools and services to each student who qualifies for the pack. It's kind of mind-boggling, actually.

As for how we sustain ourselves -- lots of big enterprise customers!
When scaling your workload is a matter of saving lives
It's a little pathetic in that it's cribbing from the premise of Stephen King's 11/22/63.
That's weird. That form is coming from Sendgrid. You can try this direct link instead https://cdn.forms-content.sg-form.com/ee9b6677-62ea-11ea-9ec...
Well, I am informally proposing making those standard :-).

IMO they're a lot more ergonomic than the Annex K functions, and do the thing most programmers think the strncat/strncpy functions do (admittedly, not part of ISO C).

Annex K should be forgotten as the mistake it is and we can move on with existing real-world interfaces instead of inventing features from whole-cloth. I thought that was generally the C standard operating practice.
How an Indian app is enabling millions to workout using just phone and camera
And that's exactly how "sprint 0" should be :)
Wow, I didn't know you could use Spotlight to do calculations! Thank you!

For anyone on macOS who doesn't know, hit command + spacebar.
The usual argument is: once you've verified some piece of code is correct, changing it (even when there should be no functional change in the semantics) carries risk. Some customers have C89-era code that compiles in C17 mode and they don't want to change that code because of these risks (perhaps the cost of testing is prohibitively expensive, there may be contractual obligations that kick in when changing that code, etc).
Simply say that there is a typo in the steam configuration, it is connecting to the (insecure) URL http://...

This allows steam network traffic to be intercepted. It can be fixed by correcting the URL to https.

For example, somebody using steam from a coffee shop could have his credentials/cookies/accounts intercepted by the coffee shop operator or any other visitor.

I believe coffees and other gaming venues are a supported use case for steam and you do not wish to leave your users at risk.

IMO There is really no need to blow this out of proportion. It's just a typo. Developers make typos all the time. Bet they're more likely to double check something trivial like that if pointed to.
Spitting on each other is a pretty big risk. Also they were heavily biased toward vulnerable elderly.
> multiple layers of abstraction that exists has made it impossible to change even one line of code without it effecting the entire codebase

Either you have misunderstood the meaning of "abstraction", or the code base has what people call "leaky" abstractions.

The point of abstraction is to create stable internal APIs, irrespective of implementation details. The entire point of abstraction is to create the separation that your code base seems to be lacking.

> No matter how much documentation and how much code I read I come no closer to making any changes in the codebase whatsoever

This approach is necessary, but you won't really understand the code until you start debugging. Can you tell us more about the stack (and, ideally, the project itself) so that we can give you better tips? Sometimes understanding code is a lot easier with the right tools (IDE, debugger, etc.)

> I am starting to wonder if I have what it takes to become a programmer

I'm sure you can do it, but it's also important to figure out if you want to. If you work on multiple code bases, including your own, and you don't enjoy it, or the frustration you're feeling now is not healthy for you, then this might not be the right career for you.

A lot of being a programmer is banging your head against a wall for many hours longer than a typical person would be willing to, until you finally get past an obstacle. Sometimes the obstacle is bad documentation, often it's bad configuration, other times it's a bug.

If the fun parts are not worth the not-fun parts for you, then that sounds like an unpleasant career path.
glibc still refuses to add the functions because they are not required by a standard.
Does anyone remember the arbitrary actions GitHub has taken in the past few months and all the "maybe it's time to start leaving GitHub if you want to avoid getting your repositories permanently deleted?"

Or is HN just as susceptible to the narrow news horizon?
Thanks for doing this. Is this effective immediately now? I tried to downgrade to free just now but it's giving me a giant list of features I'd lose if I continue. Also any change to Data pack pricing for LFS Data?

Due to the on-going Pandemic, I've been trying to cut business costs left and right. Github Team was one of those I wanted to cut but it's also so important that I couldn't decide easily. So thanks again for the change. Much appreciated!
Digital Convenience Threatens Cybersecurity
Agnita: Authentication for Create React App Using AWS Cognito
This isn't exactly a good rebuttal to "it's just the flu". But it's still important datapoint in itself.
Great news for everyone bar startups competing with them as it looks like Microsoft is turning their multi-billion acquisition of GitHub into a loss leader to get as many devs using their platform as possible, no doubt to flex seamless integrations into Azure which looks like they're executing exceptionally well with their acquisitions & new feature giveaways.

From the side-lines it looks like they're slowly becoming an unstoppable dominant force, what's surprising to me is AWS's / GCP's inaction, they're either asleep at the wheel or they don't see Microsoft's dev mindshare grab as a threat.
> HackerOne started with such promise, but stories like this keep coming out. It makes you wonder how many people were even more patient than OP.

To state the probably obvious, remember that primarily what you see are the negative interactions. You're unlikely to see many posts about the positive interactions. People don't tend to post so much when things go as expected, they do when they go wrong.
Good for you, but you can do exactly the same on Linux, so there's no advantage for BSDs there.

My myself have seen plenty of cases of people not having the time to create a package for a software they need now, but maybe the domain BSD is used in is less prone to needing software prone to that. Maybe it's just you being lucky.

However again, that's not a technical benefit. You can do exactly the same on Linux.
OK, that's a little more understandable. I assume that the initial use of HTTP is an intentional tactic that Steam uses to discover whether it is behind a captive portal or similar. That being the case then yes, the Steam client shouldn't rely on the data returned from the HTTP request, and this seems like a bug.
What about the person who wants to sell their services at a rate lower than what the government has deemed allowable? Where are their rights in this scenario?
Hi! Any perspective of extending SOC2 Report access to the Teams level? Small companies in regulated environments aren't able to jump to enterprise ($$$) so need to look elsewhere to get a SOC2 compliant version control system at a decent price. Love the Github product so it was tough when we had to make the decision to move off of it.
>I think it is important that the system they are changing to is better for Mongolian people, not tourists.

This very charitably assumes that this is the will of Mongolian people and not just the will of the government.

Nowhere in the article does it mention that there was a referendum on this, and I am certain that almost anyone on HN would agree that one is necessary for a change as serious as this, upheaval of the language itself would have very serious consequences that could potentially last centuries.
Just want to say that I am _so_ happy and continue to be impressed but what you've done since joining GitHub. Feels like a big shift from even a couple years ago.

On behalf of our tiny team at WorkOS, thanks! :)
Thanks a lot!!
Let me check this out.
What would the author say about Shazam? Is it a master class that Shazam is one button you press and hold it up to a speaker? It’s the only possible form Shazam could take. Choosing the obvious form in a design exercises where the choices are already narrowed down for you isn’t really a profound example of simplifying a complex idea.

The Mac OS dock might be a real master class, the Windows start bar (for it’s time, to some degree, before it get’s overwhelmed).
Microsoft does not even implement Annex K.

> Microsoft Visual Studio implements an early version of the APIs. However, the implementation is incomplete and conforms neither to C11 nor to the original TR 24731-1.

> As a result of the numerous deviations from the specification the Microsoft implementation cannot be considered conforming or portable.

http://www.open-std.org/jtc1/sc22/wg14/www/docs/n1967.htm
Required reviewers I think means in a team of [A, B, C], (A | B) are required but not C.

Unless i’m missing something, it should not be the same as “administrators” - otherwise branch protection rules would be fine.
Hi Nat - this is a really bold move, and shows how competitive the market for developer tooling is.

Does GitHub anticipate that this pricing change will affect the proportion of code that's provided under free / open source licensing on your platform, and if so can you share any information regarding the direction GitHub would like to lead the community in?
Oh I've definitely seen that too. My example requires responsible (and smart) leadership. My thought is that optimizing costs engineering hours, which are much more expensive than paying for the service bills.
I do not actually develop in C (other than short examples to feed the C analyzer that I work on, which is not written in C) but our customers do employ plenty of C developers. These customers are developing embedded software that reads inputs from sensors, process them, and send the final results of the computations to actuators, in fields such as IoT, aeronautics, rail, space, nuclear energy production, autonomous transportation, …

The list is very much biased by the sort of analyzer we provide. There are certainly plenty of non-embedded codebases in C and of developers paid to maintain and extend them, it's just that we currently do not work with them as much.

I do not know about whether the compensation is better or worse than for other technologies.
I feel like this guy while in quarantine the past few weeks.
That cure is far worse than the disease.

There is heavy precedent behind legal definitions being used to stifle dissent - it is part of why there is the public figure standard for libel and why it is such a high bar to clear. Hell the system has enough issues with whistleblower hunting to shoot the messenger for pointing out they are fucked up without giving them another tool. It wouldn't result in "truth but less fredom" but "more lies and less freedom".
I would read that now.
Stuff like SAML is kind of the only leverage freemium SaaS has for rationalizing charging enterprise customers.
In the US, Blackmail requires a benefit in exchange for not disclosing information.

A public reply isn't much of a benefit, and my understanding is that the vulnerabilities will be disclosed eventually within a reasonably limited timeframe.
Hey Nat -- quick Q, with this change, is there any need for individual developers to pay for "Pro" accounts? Or did the benefits of a "Pro" account just get covered by the "Free" plan?
https://literarydevices.net/hyperbole/
>There have been no proposals to add new array types and it doesn't seem likely at the core language level.

One alternative to adding types is to allow enforcing consistency in some structs with the trailing array:

struct my_obj {
const size_t n;
//other variables
char text[n];
};

where for simplicity you might only allow the first member to act as a length (and it must of course be constant). The point is that then the initializer:

struct my_obj b = {.n = 5};

should produce an object of the right size. For heap allocation you could use something like:

void * vmalloc(size_t base, size_t var, size_t cnt) {
void *ret = malloc(base + var * cnt);
if (!ret) return ret;
* (size_t *) ret = cnt;
return ret;
}
> I think the author is partially at fault for repeatedly failing to communicate the issue clearly.

I disagree. The first sentence of the report includes "HTTP", "man in the middle attack" and "store.steampowered.com"

If that isn't clear to someone, they are not sufficiently trained to triage vulnerability reports. You simply cannot do that job right if you need the attacker to hand-walk you through the difference between HTTP and HTTPS and why you would use the latter for an online store.
> A bunch of people here are commenting about how Google is silently cancelling a lifetime price guarantee.

Early adopters were promised a fixed, permanently rebated price for signing up.

I remember. I was one who took the offer (but later cancelled for other reasons).
The practical lesson here is, as always: be extremely wealthy.

No matter what you do, people will think it is profoundly smart.
I don't work at GitHub, but I believe if you reach out to GitHub Support and sign an NDA they can provide you the SOC-2 report. (Most vendors will do this.)
Airbreak.dev: Jailbreak your CPAP machine to turn them into ventilators
Why would anyone stockpile emergency stuff, if in case they are needed, they will be called "profiteers" and taken advantage off?

People that rush buy this stuff to make a profit, are actually helpful in promptly preserving the limited supply from running out.
I am very confused by the events and timeline detailed in the article.

Bloomberg (Edit: Bloomberg News) published a story on the Xi family wealth in 2012 and were banned for it. But this article says they were still investigating and writing that story in 2013. And that they buried it. And that they did so to avoid upsetting the CCP etc.

They even have quotes:

"late Oct 2013":

>"It is for sure going to, you know, invite the Communist Party to, you know, completely shut us down and kick us out of the country," Winkler said. "So, I just don't see that as a story that is justified."

Except apparently Winkler, "founding editor in chief" didn't know that bloomberg news was already banned in China and had been for a year and for already publishing this story!?

Has someone just massively screwed up their dates?

https://www.reuters.com/article/us-china-censorship-bloomber...

https://en.wikipedia.org/wiki/Websites_blocked_in_mainland_C...

There is a lot to discuss here:

* The extent that spouses' activities effect employee NDAs

* When and whether NDAs are appropriate both in Journalism and other industries

* The CCP and Chinese governments abuse of economic powers to silent dissent, in this case internationally and US and other governments compliance with that policy.

* Connections between wealth and political power, both in China and the world

* Whether being part of the larger Bloomberg entity strengthens BBG News or makes them more liable to external pressure

I also think Winklers position (assuming it was his position, since apparently all this happened after it had already happened?) was very sensible:

>Winkler alluded to that in his remarks. "There's a way to use the information you have in such a way that enables us to report, but not kill ourselves in the process and wipe out everything we've tried to build there," he told the reporting team. Bloomberg News and Winkler declined to comment for this story.

Aka: we can't publish this as we do too much business there, but we could leak it to someone else without the same exposure

Sadly the article seems to make a bad job of covering the basic facts and it's can't help but quote emotional projection instead of giving clear outlines of events. Good luck with this one (gender non-specific) guys!
I think we reached a full cycle (again), from turning complete configuration languages also known as programming languages to plain text files and everything in between.
> For example, his "emulation cones" are a new name for a very old and extremely well-studied idea. The term "rulial space", similarly, is a new name for an idea that's well-developed in programming language theory.

Can you go into a little more detail about the other versions of these ideas? What are they called in other theories?
Yes! What's interesting about Gibson's vision is that he assumed connectivity would be hard, but VR would be easy. It's a world of payphones, fax machines, and "simstim" where you can receive someone else's sensory input and ride along inside their head as they move through the world.

That's not where we are now, but we'll be a lot closer to it if and when we nail VR.
Maybe the over 65s in the UK can't isolate themselves as easily as younger age groups. Knowing percentages of older people in nursing homes for different countries could be useful.
Still doesn't solve the fact that filesystems across different OS's allow invalid UTF8 sequences in the filenames.

Maybe 99% of apps do not care, but even a simple "cp" tool should care. Filenames (and maybe other named resoureces) should be treated completely differently, and not blindly assumed that they are utf8 compatible.
We reached out and were told we would need to upgrade to the enterprise version. (This was probably 5 months ago before they announced a few startup friendly offerings)
If you're like us and your entire Github usecase now fits within this free tier, it seems like you'll have to manually downgrade for it to take effect.

> We’re also reducing the price of our paid Team plan from $9 per user/month to $4 per user/month, effective immediately. Existing customers will have their bills automatically reduced going forward.

I don't mind this - we'll likely stay on the paid plan anyways at that price point. But there you are.
> “The idea that it was just a totally natural occurrence is circumstantial. The evidence it leaked from the lab is circumstantial. Right now, the ledger on the side of it leaking from the lab is packed with bullet points and there’s almost nothing on the other side,” the official said.

> As my colleague David Ignatius noted, the Chinese government’s original story — that the virus emerged from a seafood market in Wuhan — is shaky. Research by Chinese experts published in the Lancet in January showed the first known patient, identified on Dec. 1, had no connection to the market, nor did more than one-third of the cases in the first large cluster. Also, the market didn’t sell bats.

Clearly that they didn't sell bats doesn't preclude intermediary species infected through bats, but the lab accident story is looking more plausible as time goes on.
I noticed the change as well, but didn't think to investigate. Thanks for surfacing this information.
Facts you say? The world is all ears!
This is an awesome change! In case anyone else was wondering, here's what you lose by cancelling:

You are downgrading to GitHub Free
After April 15, 2020, ... features and limits will change:

Protected branches in private repos
Draft PRs in private repos
GitHub Pages in private repos (using 1)
Wikis in private repos
Code owners in private repos
Multiple issue assignees in private repos
Multiple PR assignees in private repos
Code review automatic assignment in private repos
Scheduled reminders in private repos
Standard support
2,000 minutes for GitHub Actions (currently 3,000)
500MB of storage for packages (currently 2GB)
Just this Sunday I used an M5-sized drill bit from one manufacturer, in a drill from a second manufacturer, and the hole that I drilled was EXACTLY the right size for my M5-sized bolts from a third manufacturer.

After recently spending three whole days trying to make one part of Kubernetes talk to another part of Kubernetes (and eventually giving up), that brought me so much joy that I’m wondering if I should give up on software and get into carpentry full-time...
Also, Berkshire Hathaway is a master at PR, and the "aw shucks" authenticity of Warren Buffet is a centerpiece of it.

Warren Buffet still appeals to Middle Americans even though his company has been at the heart of just about everything that went wrong in finance and business in the 2010s.

For instance, they bought a number of food-related brands such as Kraft, made changes that damaged the taste of the products, and seemed blindsided when sales fell. They replaced the cheese in Kraft Mac and Cheese with Milk Protein Concentrate from China, which hurt the sensory qualities of the product dramatically. Within a few years, most store brands had made the change to keep up.

Later on I saw Kraft MC ads all over NYC asking you to remember how much you liked it when you were small that don't tell you that it tastes much worse than it did then. They'll sell you a box, sure, but then you'll spit it out and never buy it again.

Jim Cramer has talked about the decline of big food brands on his show many times, but he doesn't say Warren Buffet or Berkshire Hathaway has anything to do with it because he can do no wrong in the eyes of media companies that are swimming in Geico ad cash.

Similarly, CNBC sends Becky Quick out to Omaha as often as they can. The oldsters in the audience really likes Warren Buffet and Warren Buffet thinks Becky Quick is a babe (I sure do) and leers at her more and more as dementia claims his mind. It is in plain view but doesn't get talked about because the media can't get enough of that Gecko.

When I read an article like that I don't think the author got paid off, it's just they see that all the respectable people act as if they'd been paid off so you can look respectable by acting as if you were paid off too. It's like those fake influencers who can't get paid but pretend they do because maybe someday they will be.
Read up on the imposter syndrome. The fact that you're actively trying to work on open source means you're already ahead of the pack. I'd say keep trying and engage with others that are active on the same projects and you'll eventually be able to fill in the gaps.

tldr; don't give up.
I came to this thread to observe the same behavior, without any plans to comment, expecting any comment that is even mildly anti-CCP to be heavily downvoted. But I just had to second your own observation at the peril to my own karma.